Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
_CCC Global Settings
Data collected on: 03/03/2016 12:14:34
General
Details
DomainCHURCHILLCC.ORG
OwnerCHURCHILLCC\Domain Admins
Created22/09/2014 15:42:44
Modified03/03/2016 12:14:18
User Revisions1195 (AD), 1195 (SYSVOL)
Computer Revisions2526 (AD), 2526 (SYSVOL)
Unique ID{D3C4CC40-BE06-44C7-9514-7B610F158478}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
EstablishmentsYesEnabledCHURCHILLCC.ORG/Establishments

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
None
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
CHURCHILLCC\Build in Progress {SS}CustomNo
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Local Policies/Security Options
Interactive Logon
PolicySetting
Interactive logon: Do not display last user nameEnabled
Interactive logon: Number of previous logons to cache (in case domain controller is not available)25 logons
Interactive logon: Prompt user to change password before expiration5 days
Interactive logon: Require Domain Controller authentication to unlock workstationDisabled
System Services
Application Management (Startup Mode: Automatic)
Permissions
TypeNamePermission
AllowBUILTIN\AdministratorsFull Control
AllowNT AUTHORITY\SYSTEMFull Control
AllowNT AUTHORITY\INTERACTIVERead
Auditing
TypeNameAccess
FailureEveryoneFull Control
Computer Browser (Startup Mode: Disabled)
Permissions
No permissions specified
Auditing
No auditing specified
File System
%SystemDrive%\Cache
Configure this file or folder then: Replace existing permissions on all subfolders and files with inheritable permissions
Owner
Permissions
TypeNamePermissionApply To
AllowAPPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGESRead and ExecuteThis folder, subfolders and files
AllowCREATOR OWNERFull ControlSubfolders and files only
AllowEveryoneModifyThis folder, subfolders and files
AllowNT AUTHORITY\SYSTEMFull ControlThis folder, subfolders and files
AllowBUILTIN\AdministratorsFull ControlThis folder, subfolders and files
AllowBUILTIN\UsersRead and ExecuteThis folder, subfolders and files
Allow inheritable permissions from the parent to propagate to this object and all child objectsDisabled
Auditing
No auditing specified
Wireless Network (802.11) Policies
Wi-Fi Policy
Policy NameWi-Fi Policy
Policy DescriptionSample Description
Policy TypeWindows Vista and Later Releases
Global Settings
Use Windows wireless LAN network services for clientsEnabled
Shared user credentials for network authenticationEnabled
Hosted networksEnabled
Allow user to view denied networksEnabled
Allow everyone to create all user profilesDisabled
Only use Group Policy profiles for allowed networksEnabled
Network Filters
Prevent connection to infrastructure networksDisabled
Prevent connection to adhoc networksEnabled
Allowed Networks
Network Name (SSID)Network Type
CCC Secured AccessInfrastructure
Blocked Networks
Network Name (SSID)Network Type
CCC Open Wi-Fi AccessInfrastructure
Staff Wi-FiInfrastructure
iOS Wi-FiInfrastructure
Guest Wi-FiInfrastructure
6th Form Wi-FiInfrastructure
OSX-WiFi-AccessInfrastructure
Preferred Network Profiles
CCC Secured Access
Profile NameCCC Secured Access
Network TypeInfrastructure
Automatically connect to this networkEnabled
Automatically switch to a more preferred networkDisabled
  
Network Name (SSID)Network Broadcasts its SSID
CCC Secured AccessFalse
Security Settings
AuthenticationWPA2
EncryptionAES
Use 802.1XEnabled
Pairwise Master Key (PMK) CachingEnabled
PMK Time-to-Live (minutes)720
Number of Entries in PMK Cache128
Maximum Pre-authentication Failures3
IEEE 802.1X Settings
Computer AuthenticationComputer only
Maximum Authentication Failures1
Maximum EAPOL-Start Messages Sent3
Held Period (seconds)1
Start Period (seconds)5
Authentication Period (seconds)18
Network Authentication Method Properties
Authentication methodProtected EAP (PEAP)
Validate server certificateEnabled
Connect to these serversCCC-SVR-GW.CHURCHILLCC.ORG
Do not prompt user to authorize new servers or trusted certification authoritiesEnabled
Enable fast reconnectEnabled
Disconnect if server does not present cryptobinding TLVDisabled
Enforce network access protectionDisabled
Authentication Method Configuration
Authentication methodSecured password (EAP-MSCHAP v2)
Automatically use my Windows logon name and password(and domain if any)Disabled
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Adobe Acrobat Reader DC/Preferences/General
PolicySettingComment
Disable automatic updatesDisabled
Turn off user participation in the feedback programEnabled
Adobe Acrobat Reader DC/Preferences/Startup
PolicySettingComment
Enable Protected Mode at startupDisabled
Adobe Reader XI/Preferences/General
PolicySettingComment
Disable automatic updatesDisabled
Display PDFs in browserDisabled
Turn off user participation in the feedback programEnabled
Adobe Reader XI/Preferences/Startup
PolicySettingComment
Enable Protected Mode at startupDisabled
Microsoft Office 2013 (Machine)/Updates
PolicySettingComment
Enable Automatic UpdatesEnabled
Hide option to enable or disable updatesEnabled
Microsoft Office 2016 (Machine)/Updates
PolicySettingComment
Enable Automatic UpdatesEnabled
Hide option to enable or disable updatesEnabled
System/Group Policy
PolicySettingComment
Configure user Group Policy loopback processing modeEnabled
Mode:Merge
System/Logon
PolicySettingComment
Always wait for the network at computer startup and logonEnabled
System/Remote Assistance
PolicySettingComment
Configure Offer Remote AssistanceEnabled
Permit remote control of this computer:Allow helpers to remotely control the computer
Helpers:
churchillcc\domain admins
Windows Components/Internet Explorer
PolicySettingComment
Prevent managing SmartScreen FilterEnabled
Select SmartScreen Filter modeOff
Windows Components/Internet Explorer/Internet Control Panel/Security Page
PolicySettingComment
Intranet Sites: Include all network paths (UNCs)Enabled
Intranet Sites: Include all sites that bypass the proxy serverDisabled
Site to Zone Assignment ListEnabled
Enter the zone assignments here. 
*.mymaths.co.uk2
ccc-svr-0012
ccc-svr-0022
ccc-svr-0032
shared2
ccc-svr-sims2
172.24.0.1-172.24.30.2552
172.26.0.1-172.26.30.2552
*.microsoft.com2
*.irisconnect.com2
*.churchillcc.org1
*.thecloudatchurchill.co.uk1
*.tes.co.uk2
10.0.0.0-10.255.255.2552
10.116.252.2002
PolicySettingComment
Turn on automatic detection of intranetDisabled
Turn on certificate address mismatch warningEnabled
Turn on Notification bar notification for intranet contentEnabled
Windows Components/Microsoft Edge
PolicySettingComment
Allows you to configure password managerEnabled
Allows you to configure SmartScreenEnabled
Allows you to let people send Do Not Track headersEnabled
Allows you to let people use autofill on websitesEnabled
Allows you to run pop-upsEnabled
Allows you to run scripts, like JavascriptEnabled
Configure how Microsoft Edge treats cookiesEnabled
Configure Cookies SettingDon't block
PolicySettingComment
Sends all intranet traffic over to Internet ExplorerDisabled
Stops address bar from showing search suggestionsEnabled
Windows Components/Remote Desktop Services/Remote Desktop Connection Client
PolicySettingComment
Allow .rdp files from valid publishers and user's default .rdp settingsEnabled
Specify SHA1 thumbprints of certificates representing trusted .rdp publishersEnabled
Comma-separated list of SHA1 trusted certificate thumbprints:47328776512160B943054DC4F017CDA86DA2E612
Windows Components/Remote Desktop Services/Remote Desktop Connection Client/RemoteFX USB Device Redirection
PolicySettingComment
Allow RDP redirection of other supported RemoteFX USB devices from this computerEnabled
RemoteFX USB Redirection Access RightsAdminstrators and Users
Windows Components/Windows Defender
PolicySettingComment
Turn off Windows DefenderEnabled
Preferences
Windows Settings
Files
File (Target Path: %programfiles%\Show Desktop\Desktop.lnk)
Desktop.lnk (Order: 1)
General
ActionCreate
Properties
Source file(s)\\ccc-svr-upd\Packages\Show Desktop\Desktop.lnk
Destination file%programfiles%\Show Desktop\Desktop.lnk
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not1
path%programfiles%\Show Desktop\Desktop.lnk
typeEXISTS
folder0
File (Target Path: %programfiles%\Show Desktop\ShowDesktop.scf)
ShowDesktop.scf (Order: 2)
General
ActionCreate
Properties
Source file(s)\\ccc-svr-upd\Packages\Show Desktop\ShowDesktop.scf
Destination file%programfiles%\Show Desktop\ShowDesktop.scf
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not1
path%programfiles%\Show Desktop\ShowDesktop.scf
typeEXISTS
folder0
File (Target Path: %windir%\Sun\Java\Deployment\deployment.config)
deployment.config (Order: 3)
General
ActionReplace
Properties
Source file(s)\\churchillcc.org\SYSVOL\CHURCHILLCC.ORG\scripts\Java\Java7Restrict\deployment.config
Destination file%windir%\Sun\Java\Deployment\deployment.config
Suppress errors on individual file actionsDisabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
File (Target Path: C:\Program Files (x86)\Lifelong Kindergarten Group\Scratch 1.4\Scratch.ini)
Scratch.ini (Order: 4)
General
ActionReplace
Properties
Source file(s)\\SOME SERVER PATH\Packages\ScratchConfig\Scratch.ini
Destination fileC:\Program Files (x86)\Lifelong Kindergarten Group\Scratch 1.4\Scratch.ini
Suppress errors on individual file actionsDisabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathC:\Program Files (x86)\Lifelong Kindergarten Group\Scratch 1.4\scratch.ini
typeEXISTS
folder0
File (Target Path: C:\Program Files\SIMS\SIMS .net\connect.ini)
connect.ini (Order: 5)
General
ActionReplace
Properties
Source file(s)\\churchillcc.org\sysvol\CHURCHILLCC.ORG\scripts\SIMSnetIniFiles\connect_ini.ini
Destination fileC:\Program Files\SIMS\SIMS .net\connect.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathC:\Program Files\SIMS\SIMS .net
typeEXISTS
folder1
Item-level targeting: File Match
AttributeValue
boolAND
not1
pathC:\Program Files\SIMS\SIMS .net\connect.ini
typeEXISTS
folder0
File (Target Path: C:\Program Files (x86)\SIMS\SIMS .net\connect.ini)
connect.ini (Order: 6)
General
ActionReplace
Properties
Source file(s)\\churchillcc.org\sysvol\CHURCHILLCC.ORG\scripts\SIMSnetIniFiles\connect_ini.ini
Destination fileC:\Program Files (x86)\SIMS\SIMS .net\connect.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathC:\Program Files (x86)\SIMS\SIMS .net
typeEXISTS
folder1
Item-level targeting: File Match
AttributeValue
boolAND
not1
pathC:\Program Files (x86)\SIMS\SIMS .net\connect.ini
typeEXISTS
folder0
File (Target Path: c:\Program Files\SIMS\FMSSQL\FMSconnect.ini)
FMSconnect.ini (Order: 7)
General
ActionReplace
Properties
Source file(s)\\churchillcc.org\sysvol\CHURCHILLCC.ORG\scripts\SIMSnetIniFiles\fmsconnect_ini.ini
Destination filec:\Program Files\SIMS\FMSSQL\FMSconnect.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathc:\Program Files\SIMS\FMSSQL
typeEXISTS
folder1
Item-level targeting: File Match
AttributeValue
boolAND
not1
pathc:\Program Files\SIMS\FMSSQL\fmsconnect.ini
typeEXISTS
folder0
File (Target Path: c:\Program Files (x86)\SIMS\FMSSQL\FMSconnect.ini)
FMSconnect.ini (Order: 8)
General
ActionReplace
Properties
Source file(s)\\churchillcc.org\sysvol\CHURCHILLCC.ORG\scripts\SIMSnetIniFiles\fmsconnect_ini.ini
Destination filec:\Program Files (x86)\SIMS\FMSSQL\FMSconnect.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathc:\Program Files (x86)\SIMS\FMSSQL
typeEXISTS
folder1
Item-level targeting: File Match
AttributeValue
boolAND
not1
pathc:\Program Files (x86)\SIMS\FMSSQL\FMSconnect.ini
typeEXISTS
folder0
File (Target Path: C:\Windows\acroct.ini)
acroct.ini (Order: 9)
General
ActionReplace
Properties
Source file(s)\\ccc-svr-upd\Packages\_Applications for all PCs\Adobe Reader Remove TTF via GPO\C\WINDOWS\acroct.ini
Destination fileC:\Windows\acroct.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyYes
Folders
Folder (Path: C:\PaperCut MF Cache)
PaperCut MF Cache (Order: 1)
General
ActionDelete
Attributes
PathC:\PaperCut MF Cache
Delete this folder (if emptied)Enabled
Recursively delete all subfolders (if emptied)Enabled
Delete all files in the folder(s)Enabled
Allow deletion of read-only files/foldersEnabled
Ignore errors for files/folders that cannot be deletedEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathC:\PaperCut MF Cache
typeEXISTS
folder1
Folder (Path: C:\Cache)
Cache (Order: 2)
General
ActionDelete
Attributes
PathC:\Cache
Delete this folder (if emptied)Enabled
Recursively delete all subfolders (if emptied)Enabled
Delete all files in the folder(s)Enabled
Allow deletion of read-only files/foldersEnabled
Ignore errors for files/folders that cannot be deletedEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathC:\Cache
typeEXISTS
folder1
Registry
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Run
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: Persistence
General
ActionDelete
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value namePersistence
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: IntelliPoint
General
ActionDelete
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value nameIntelliPoint
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: HotKeysCmds
General
ActionDelete
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows\CurrentVersion\Run
Value nameHotKeysCmds
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Policies/Explorer
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: UseDesktopIniCache
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value nameUseDesktopIniCache
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/Windows NT/CurrentVersion/Drivers32
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: midimapper
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Value namemidimapper
Value typeREG_SZ
Value dataVirtualMIDISynth\VirtualMIDISynth.dll
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Computer Name
AttributeValue
boolAND
not0
typeNETBIOS
nameMSC*
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: DisableCAD
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value nameDisableCAD
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: DefaultDomainName
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value nameDefaultDomainName
Value typeREG_SZ
Value dataCHURCHILLCC
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Registry item: AutoAdminLogon
General
ActionUpdate
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Value nameAutoAdminLogon
Value typeREG_SZ
Value data0
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/BrowserChoice
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: Enable
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\BrowserChoice
Value nameEnable
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/BrowserChoice
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: Enable
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\BrowserChoice
Value nameEnable
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Citrix/Dazzle
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AllowAddStore
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Citrix\Dazzle
Value nameAllowAddStore
Value typeREG_SZ
Value dataN
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Citrix
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Policies/Citrix
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: EnableFTU
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Policies\Citrix
Value nameEnableFTU
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Citrix
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Policies/Adobe/Acrobat Reader/DC/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\DC
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Policies/Adobe/Acrobat Reader/11.0/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\11.0
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Policies/Adobe/Acrobat Reader/10.0/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Policies\Adobe\Acrobat Reader\10.0\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keyWow6432Node\Policies\Adobe\Acrobat Reader\10.0
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Serif/MoviePlus/7.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Serif\MoviePlus\7.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Serif\MoviePlus\7.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Serif/PagePlus/15.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Serif\PagePlus\15.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Serif\PagePlus\15.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Serif/PanoramaPlus/4.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Serif\PanoramaPlus\4.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Serif\PanoramaPlus\4.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Serif/PhotoPlus/14.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Serif\PhotoPlus\14.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Serif\PhotoPlus\14.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Wow6432Node/Serif/WebPlus/12.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Wow6432Node\Serif\WebPlus\12.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Wow6432Node\Serif\WebPlus\12.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Citrix
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: EnableFTU
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Citrix
Value nameEnableFTU
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Citrix
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Adobe/Acrobat Reader/DC/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Policies\Adobe\Acrobat Reader\DC
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Adobe/Acrobat Reader/11.0/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Policies\Adobe\Acrobat Reader\11.0
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Policies/Adobe/Acrobat Reader/10.0/FeatureLockDown
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: bProtectedMode
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Policies\Adobe\Acrobat Reader\10.0\FeatureLockDown
Value namebProtectedMode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Policies\Adobe\Acrobat Reader\10.0
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Citrix/Dazzle
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AllowAddStore
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Citrix\Dazzle
Value nameAllowAddStore
Value typeREG_SZ
Value dataN
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolOR
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Citrix
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Serif/MoviePlus/7.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Serif\MoviePlus\7.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Serif\MoviePlus\7.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Serif/PagePlus/15.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Serif\PagePlus\15.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Serif\PagePlus\15.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Serif/PanoramaPlus/4.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Serif\PanoramaPlus\4.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Serif\PanoramaPlus\4.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Serif/PhotoPlus/14.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Serif\PhotoPlus\14.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Serif\PanoramaPlus\4.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SOFTWARE/Serif/WebPlus/12.0/Attributes
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: AutoUpdate Enabled
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Serif\WebPlus\12.0\Attributes
Value nameAutoUpdate Enabled
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Serif\WebPlus\12.0\Attributes
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/Keyboard Layout
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Registry item: IgnoreRemoteKeyboardLayout
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSYSTEM\CurrentControlSet\Control\Keyboard Layout
Value nameIgnoreRemoteKeyboardLayout
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Power Options
Power Plan (At least Windows 7) (Name: High performance)
Reset High Performance to Default (Order: 1)
Properties
ActionUpdate
Make this the active Power Plan:Disabled
NameHigh performance
When computer is:Plugged inRunning on batteries
Require a password on wakeup:YesYes
Turn off hard disk after:After 20 minutesAfter 20 minutes
Sleep after:NeverNever
Allow hybrid sleep:OffOff
Hibernate after:NeverNever
Lid close action:SleepSleep
Power button action:ShutdownShutdown
Start menu power button:Do nothingDo nothing
Link State Power Management:OffOff
Minimum processor state:After 100 minutesAfter 5 minutes
Maximum processor state:After 100 minutesAfter 100 minutes
Turn off display after:After 15 minutesAfter 10 minutes
Adaptive display:OnOn
Critical battery action:HibernateHibernate
Low battery level:After 10 minutesAfter 10 minutes
Critical battery level:After 5 minutesAfter 5 minutes
Low battery notification:OffOff
Low battery action:Do nothingDo nothing
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Printers
Local Printer (Name: Fax)
Fax (Order: 1)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Local Printer (Name: Microsoft XPS Document Writer)
Microsoft XPS Document Writer (Order: 2)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Local Printer (Name: SMART Notebook Document Writer)
SMART Notebook Document Writer (Order: 3)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Local Printer (Name: Send To OneNote)
Send To OneNote (Order: 4)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Local Printer (Name: Send To OneNote 2013)
Send To OneNote 2013 (Order: 5)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Scheduled Tasks
Scheduled Task (At least Windows 7) (Name: Shut Down Computers)
Shut Down Computers (Order: 1)
General
ActionReplace
Task
Name Shut Down Computers
Author CHURCHILLCC\pro
Description
Run only when user is logged on S4U
UserId NT AUTHORITY\System
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.2
Enabled Yes
Triggers
1. Weekly
Stop task if it runs longer than 2 hours
Activate 05/10/2015 18:55:00Synchronize across time zones No
Enabled Yes
Recur every 1 weeks on Monday Tuesday Wednesday Thursday Friday
Actions
1. Start a program
Program/script C:\Windows\System32\shutdown.exe
Arguments /t 300 /s /c "This computer will shut down in 5 minutes, please save all work"
Start in C:\Windows\System32
Settings
Start the task only if the computer is idle for 5 minutes
Wait for idle for Immediately
Stop if the computer ceases to be idle No
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Stop task if it runs longer than 2 hours
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\Build in Progress {SS}
sidS-1-5-21-995727763-671734855-2888410724-1149
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\CCC Terminal ~1 {ST}
sidS-1-5-21-995727763-671734855-2888410724-22119
userContext0
primaryGroup0
localGroup0
Item-level targeting: Organizational Unit
AttributeValue
boolAND
not1
nameOU=Virtual Machines,DC=CHURCHILLCC,DC=ORG
userContext0
directMember0
Item-level targeting: Filter Group
AttributeValue
boolAND
not0
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameJOHNS-PC
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameLAURELANDHARDY
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameSITE-TEAM-CCTV
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
namePRO-MPC-01
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameJACKIE
Scheduled Task (At least Windows 7) (Name: Shut Down Computers if User is Logged in)
Shut Down Computers if User is Logged in (Order: 4)
General
ActionDelete
Task
Name Shut Down Computers if User is Logged in
Author CHURCHILLCC\pro
Description
Run only when user is logged on InteractiveToken
UserId NT AUTHORITY\System
Run with highest privileges LeastPrivilege
Hidden No
Configure for 1.3
Enabled Yes
Actions
1. Start a program
Program/script C:\Windows\System32\shutdown.exe
Arguments /t 1800 /s /c "This computer will shut down in 30 minutes, please save all work"
Start in C:\Windows\System32\
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\CCC Terminal ~1 {ST}
sidS-1-5-21-995727763-671734855-2888410724-22119
userContext0
primaryGroup0
localGroup0
Shut Down Computers if User is Logged in (Order: 3)
General
ActionReplace
Task
Name Shut Down Computers if User is Logged in
Author CHURCHILLCC\pro
Description
Run only when user is logged on InteractiveToken
UserId NT AUTHORITY\System
Run with highest privileges LeastPrivilege
Hidden No
Configure for 1.3
Enabled Yes
Triggers
1. Weekly
Stop task if it runs longer than 2 hours
Activate 05/10/2015 19:00:00Synchronize across time zones No
Enabled Yes
Recur every 1 weeks on Monday Tuesday Wednesday Thursday Friday
Actions
1. Start a program
Program/script C:\Windows\System32\shutdown.exe
Arguments /t 1800 /s /c "This computer will shut down in 30 minutes, please save all work"
Start in C:\Windows\System32\
Settings
Stop if the computer ceases to be idle Yes
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power Yes
Allow task to be run on demand Yes
Stop task if it runs longer than 2 hours
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Remove this item when it is no longer appliedYes
Item-level targeting: Organizational Unit
AttributeValue
boolAND
not1
nameOU=Virtual Machines,DC=CHURCHILLCC,DC=ORG
userContext0
directMember0
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\Build in Progress {SS}
sidS-1-5-21-995727763-671734855-2888410724-1149
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolAND
not1
nameCHURCHILLCC\CCC Terminal ~1 {ST}
sidS-1-5-21-995727763-671734855-2888410724-22119
userContext0
primaryGroup0
localGroup0
Item-level targeting: Filter Group
AttributeValue
boolAND
not0
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameLAURELANDHARDY
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameSITE-TEAM-CCTV
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameJOHNS-PC
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
namePRO-MPC-01
Item-level targeting: Computer Name
AttributeValue
boolAND
not1
typeNETBIOS
nameJACKIE
Shut Down Computers (Order: 2)
General
ActionDelete
Task
Name Shut Down Computers
Author CHURCHILLCC\pro
Description
Run only when user is logged on InteractiveToken
UserId NT AUTHORITY\System
Run with highest privileges LeastPrivilege
Hidden No
Configure for 1.3
Enabled Yes
Actions
1. Start a program
Program/script C:\Windows\System32\shutdown.exe
Arguments /t 1800 /s /c "This computer will shut down in 30 minutes, please save all work"
Start in C:\Windows\System32\
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\CCC Terminal ~1 {ST}
sidS-1-5-21-995727763-671734855-2888410724-22119
userContext0
primaryGroup0
localGroup0
User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Adobe Acrobat Reader DC/Preferences/General
PolicySettingComment
Accept EULAEnabled
Display splash screen at launchDisabled
Adobe Reader XI/Preferences/General
PolicySettingComment
Accept EULAEnabled
Display splash screen at launchDisabled
Custom Settings/Keyboard Layout
PolicySettingComment
Set UK Keyboard LayoutEnabled
Microsoft Access 2013/Application Settings/General
PolicySettingComment
Default database folderEnabled
Default database folderN:\
PolicySettingComment
Number of files in the Recent listEnabled
Number of entries: 0
PolicySettingComment
Number of folders in the Recent Folders listEnabled
Number of folders: 0
Microsoft Access 2013/Application Settings/Security/Trust Center
PolicySettingComment
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Access 2013/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsDisabled
Microsoft Access 2013/Miscellaneous
PolicySettingComment
Block all unmanaged add-insDisabled
Disable the Office Start screen for AccessEnabled
Show custom templates tab by default in Access on the Office Start screen and in File | NewDisabled
Microsoft Access 2016/Application Settings/General
PolicySettingComment
Default database folderEnabled
Default database folderN:\
PolicySettingComment
Number of files in the Recent listEnabled
Number of entries: 0
PolicySettingComment
Number of folders in the Recent Folders listEnabled
Number of folders: 0
Microsoft Access 2016/Application Settings/Security/Trust Center
PolicySettingComment
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Access 2016/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsDisabled
Microsoft Access 2016/Miscellaneous
PolicySettingComment
Block all unmanaged add-insDisabled
Disable the Office Start screen for AccessEnabled
Show custom templates tab by default in Access on the Office Start screen and in File | NewDisabled
Microsoft Excel 2013/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Options | Customize Ribbon | All Commands | Web Page PreviewEnabled
File tab | Share | EmailEnabled
Insert tab | Links | HyperlinkDisabled
Review tab | Changes | Protect SheetDisabled
Review tab | Changes | Protect WorkbookDisabled
Review tab | Changes | Protect and Share WorkbookDisabled
View tab | Macros | MacrosDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Record MacroDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
File tab | Options | Customize Ribbon | All Commands | Document LocationEnabled
Microsoft Excel 2013/Excel Options/Advanced
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Number of workbooks in the Recent Workbooks listEnabled
Entries on recently used file list5
Microsoft Excel 2013/Excel Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft Excel 2013/Excel Options/Save
PolicySettingComment
Default file formatEnabled
Save Excel files asExcel Workbook (*.xlsx)
Microsoft Excel 2013/Excel Options/Security/Trust Center
PolicySettingComment
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Excel 2013/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-Excel-All.vsto0
SMARTInk-Excel-All0
SISRA Analytics Excel Add-In.vsto1
SISRA Analytics Excel Add-In1
SISRA Analytics1
Microsoft Excel 2016/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Options | Customize Ribbon | All Commands | Web Page PreviewEnabled
File tab | Share | EmailEnabled
Insert tab | Links | HyperlinkDisabled
Review tab | Changes | Protect SheetDisabled
Review tab | Changes | Protect WorkbookDisabled
Review tab | Changes | Protect and Share WorkbookDisabled
View tab | Macros | MacrosDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Record MacroDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
File tab | Options | Customize Ribbon | All Commands | Document LocationEnabled
Microsoft Excel 2016/Excel Options/Advanced
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Number of workbooks in the Recent Workbooks listEnabled
Entries on recently used file list5
Microsoft Excel 2016/Excel Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft Excel 2016/Excel Options/Save
PolicySettingComment
Default file formatEnabled
Save Excel files asExcel Workbook (*.xlsx)
Microsoft Excel 2016/Excel Options/Security/Trust Center
PolicySettingComment
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Excel 2016/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-Excel-All.vsto0
SMARTInk-Excel-All0
SISRA Analytics Excel Add-In.vsto1
SISRA Analytics Excel Add-In1
SISRA Analytics1
Microsoft Office 2013/Disable Items in User Interface
PolicySettingComment
Disable commands under File tab | AccountEnabled
Check for UpdatesEnabled
Microsoft Office 2013/File Open/Save dialog box/Places Bar Locations
PolicySettingComment
Places Bar Location 1Enabled
Name:Home Area
Path:N:\
PolicySettingComment
Places Bar Location 2Enabled
Name:Shared Documents
Path:W:\
PolicySettingComment
Places Bar Location 3Enabled
Name:Staff Shared
Path:T:\
Microsoft Office 2013/First Run
PolicySettingComment
Disable First Run MovieEnabled
Disable Office First Run on application bootEnabled
Microsoft Office 2013/Global Options/Customize
PolicySettingComment
Allow roaming of all user customizationsEnabled
Menu animationsEnabled
Menu animations(System Default)
PolicySettingComment
Show shortcut keys in ScreenTipsEnabled
Turn off all user customizationsDisabled
Turn off user customizations via UIDisabled
Microsoft Office 2013/Help
PolicySettingComment
Federated search for helpDisabled
Microsoft Office 2013/Language Preferences/Display Language
PolicySettingComment
Display help inEnabled
Display help inEnglish
PolicySettingComment
Display menus and dialog boxes inEnabled
Display menus and dialog boxes inEnglish
Microsoft Office 2013/Language Preferences/Editing Languages
PolicySettingComment
Primary Editing LanguageEnabled
Primary Editing LanguageEnglish (U.K.)
Microsoft Office 2013/Language Preferences/Editing Languages/Enabled Editing Languages
PolicySettingComment
English (U.K.)Enabled
English (U.S.)Disabled
Microsoft Office 2013/Microsoft Office Document Cache
PolicySettingComment
Delete files from Office Document CacheEnabled
Open documents from Office Document Cache firstDisabled
Microsoft Office 2013/Microsoft Save As PDF and XPS add-ins
PolicySettingComment
Disable Microsoft Save As PDF and XPS add-insEnabled
Disable XPS
Microsoft Office 2013/Miscellaneous
PolicySettingComment
Block signing into OfficeEnabled
Block signing into OfficeNone allowed
PolicySettingComment
Disable Office animationsEnabled
Disable Office BackgroundsEnabled
Disable the Office Start screen for all Office applicationsEnabled
Do not validate printers before using themEnabled
Hide the Learn more about SharePoint HyperlinkEnabled
Show Paste Options button when content is pastedEnabled
Show Screen TipsEnabled
Show feature descriptions
PolicySettingComment
Show SkyDrive Sign InDisabled
Suppress recommended settings dialogEnabled
Microsoft Office 2013/Privacy/Trust Center
PolicySettingComment
Allow including screenshot with Office FeedbackDisabled
Automatically receive small updates to improve reliabilityDisabled
Disable Opt-in Wizard on first runEnabled
Enable Customer Experience Improvement ProgramDisabled
Send Office FeedbackDisabled
Microsoft Office 2013/Security Settings/Trust Center
PolicySettingComment
Trusted Location #1Enabled
Path:C:\PROGRAM FILES (X86)\MICROSOFT OFFICE\OFFICE15\
Date:
Description:Microsoft Office 2013 Folder (x64 Machines)
Allow sub folders:Enabled
PolicySettingComment
Trusted Location #2Enabled
Path:C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE15\
Date:
Description:Microsoft Office 2013 Folder (x86 Machines)
Allow sub folders:Enabled
Microsoft Office 2013/Security Settings/Trust Center/Trusted Catalogs
PolicySettingComment
Allow Unsecure Apps and CatalogsDisabled
Block the Office StoreEnabled
Microsoft Office 2013/Server Settings
PolicySettingComment
Disable the user from setting the Personal Site URLEnabled
Microsoft Office 2013/Tools | AutoCorrect Options... (Excel, PowerPoint and Access)
PolicySettingComment
Capitalize first letter of sentenceEnabled
Capitalize names of daysEnabled
Correct accidental use of cAPS LOCK keyEnabled
Correct TWo INitial CApitalsEnabled
Show AutoCorrect Options buttonsEnabled
Microsoft Office 2013/Tools | Options | General | Service Options.../Online Content
PolicySettingComment
Online Content OptionsEnabled
Online content optionsDo not allow Office to connect to the Internet
Microsoft Office 2016/File Open/Save dialog box/Places Bar Locations
PolicySettingComment
Places Bar Location 1Enabled
Name:Home Area
Path:N:\
PolicySettingComment
Places Bar Location 2Enabled
Name:Shared Documents
Path:W:\
PolicySettingComment
Places Bar Location 3Enabled
Name:Staff Shared
Path:T:\
Microsoft Office 2016/First Run
PolicySettingComment
Disable First Run MovieEnabled
Disable Office First Run on application bootEnabled
Microsoft Office 2016/Global Options/Customize
PolicySettingComment
Allow roaming of all user customizationsEnabled
Menu animationsEnabled
Menu animations(System Default)
PolicySettingComment
Show shortcut keys in ScreenTipsEnabled
Turn off all user customizationsDisabled
Turn off user customizations via UIDisabled
Microsoft Office 2016/Help
PolicySettingComment
Federated search for helpDisabled
Microsoft Office 2016/Language Preferences/Display Language
PolicySettingComment
Display help inEnabled
Display help inEnglish
PolicySettingComment
Display menus and dialog boxes inEnabled
Display menus and dialog boxes inEnglish
Microsoft Office 2016/Language Preferences/Editing Languages
PolicySettingComment
Primary Editing LanguageEnabled
Primary Editing LanguageEnglish (U.K.)
Microsoft Office 2016/Language Preferences/Editing Languages/Enabled Editing Languages
PolicySettingComment
English (U.K.)Enabled
English (U.S.)Disabled
Microsoft Office 2016/Microsoft Office Document Cache
PolicySettingComment
Delete files from Office Document CacheEnabled
Open documents from Office Document Cache firstDisabled
Microsoft Office 2016/Microsoft Save As PDF and XPS add-ins
PolicySettingComment
Disable Microsoft Save As PDF and XPS add-insEnabled
Disable XPS
Microsoft Office 2016/Miscellaneous
PolicySettingComment
Block signing into OfficeEnabled
Block signing into OfficeNone allowed
PolicySettingComment
Disable Office animationsEnabled
Disable Office BackgroundsEnabled
Disable the Office Start screen for all Office applicationsEnabled
Do not validate printers before using themEnabled
Hide the Learn more about SharePoint HyperlinkEnabled
Show OneDrive Sign InDisabled
Show Paste Options button when content is pastedEnabled
Show Screen TipsEnabled
Show feature descriptions
PolicySettingComment
Suppress recommended settings dialogEnabled
Microsoft Office 2016/Privacy/Trust Center
PolicySettingComment
Allow including screenshot with Office FeedbackDisabled
Automatically receive small updates to improve reliabilityDisabled
Disable Opt-in Wizard on first runEnabled
Enable Customer Experience Improvement ProgramDisabled
Send Office FeedbackDisabled
Send personal informationDisabled
Microsoft Office 2016/Security Settings/Trust Center
PolicySettingComment
Trusted Location #1Enabled
Path:C:\PROGRAM FILES (X86)\MICROSOFT OFFICE\OFFICE16\
Date:
Description:Microsoft Office 2013 Folder (x64 Machines)
Allow sub folders:Enabled
PolicySettingComment
Trusted Location #2Enabled
Path:C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE16\
Date:
Description:Microsoft Office 2013 Folder (x86 Machines)
Allow sub folders:Enabled
Microsoft Office 2016/Security Settings/Trust Center/Trusted Catalogs
PolicySettingComment
Allow Unsecure web add-ins and CatalogsDisabled
Block the Office StoreEnabled
Microsoft Office 2016/Server Settings
PolicySettingComment
Disable the user from setting the Personal Site URLEnabled
Microsoft Office 2016/Tools | AutoCorrect Options... (Excel, PowerPoint and Access)
PolicySettingComment
Capitalize first letter of sentenceEnabled
Capitalize names of daysEnabled
Correct accidental use of cAPS LOCK keyEnabled
Correct TWo INitial CApitalsEnabled
Show AutoCorrect Options buttonsEnabled
Microsoft Office 2016/Tools | Options | General | Service Options.../Online Content
PolicySettingComment
Online Content OptionsEnabled
Online content optionsDo not allow Office to connect to the Internet
Microsoft Office 2016/Tools | Options | Spelling
PolicySettingComment
Flag Repeated WordsEnabled
Ignore words with numbersEnabled
Microsoft Outlook 2013/Account Settings/Exchange
PolicySettingComment
Authentication with Exchange ServerEnabled
Select the authentication with Exchange server.Kerberos/NTLM Password Authentication
Microsoft Outlook 2013/Security/Automatic Picture Download Settings
PolicySettingComment
Automatically download content for e-mail from people in Safe Senders and Safe Recipients ListsEnabled
Microsoft Outlook 2016/Account Settings/Exchange
PolicySettingComment
Authentication with Exchange ServerEnabled
Select the authentication with Exchange server.Kerberos/NTLM Password Authentication
Microsoft Outlook 2016/Security/Automatic Picture Download Settings
PolicySettingComment
Automatically download content for e-mail from people in Safe Senders and Safe Recipients ListsEnabled
Microsoft PowerPoint 2013/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Options | Customize Ribbon | All Commands | Web Page PreviewEnabled
File tab | Share | Send Using E-mailEnabled
Insert tab | Links | HyperlinkDisabled
Review tab | Language | LanguageDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
File tab | Options | Customize Ribbon | All Commands | Address Enabled
Slide Show tab | Start Slide Show | Broadcast Slide ShowDisabled
Microsoft PowerPoint 2013/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-PowerPoint-All1
SMARTInk-PowerPoint-All.vsto1
Microsoft PowerPoint 2013/PowerPoint Options/Advanced
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Number of presentations in the Recent Presentations listEnabled
Size of recently used file list5
Microsoft PowerPoint 2013/PowerPoint Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft PowerPoint 2013/PowerPoint Options/Save
PolicySettingComment
Default file formatEnabled
Save PowerPoint files asPowerPoint Presentation (*.pptx)
PolicySettingComment
Default file locationDisabled
Microsoft PowerPoint 2013/PowerPoint Options/Security/Trust Center
PolicySettingComment
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft PowerPoint 2016/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Options | Customize Ribbon | All Commands | Web Page PreviewEnabled
File tab | Share | Send Using E-mailEnabled
Insert tab | Links | HyperlinkDisabled
Review tab | Language | LanguageDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
File tab | Options | Customize Ribbon | All Commands | Address Enabled
Slide Show tab | Start Slide Show | Broadcast Slide ShowEnabled
Microsoft PowerPoint 2016/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-PowerPoint-All1
SMARTInk-PowerPoint-All.vsto1
Microsoft PowerPoint 2016/PowerPoint Options/Advanced
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Number of presentations in the Recent Presentations listEnabled
Size of recently used file list5
Microsoft PowerPoint 2016/PowerPoint Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft PowerPoint 2016/PowerPoint Options/Save
PolicySettingComment
Default file formatEnabled
Save PowerPoint files asPowerPoint Presentation (*.pptx)
PolicySettingComment
Default file locationEnabled
Default file locationN:\
Microsoft PowerPoint 2016/PowerPoint Options/Security/Trust Center
PolicySettingComment
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Publisher 2013/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Export | Publish HTMLDisabled
Web tab | View | Web Page PreviewDisabled
File tab | Share | EmailEnabled
File tab | Share | E-mail PreviewEnabled
Developer tabDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
Developer tab | Add-Ins | COM Add-InsDisabled
File tab | OptionsDisabled
Microsoft Publisher 2013/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
Microsoft Publisher 2016/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File tab | Export | Publish HTMLDisabled
Web tab | View | Web Page PreviewDisabled
File tab | Share | EmailEnabled
File tab | Share | E-mail PreviewEnabled
Developer tabDisabled
Developer tab | Code | MacrosDisabled
Developer tab | Code | Macro SecurityDisabled
Developer tab | Code | Visual BasicDisabled
Developer tab | Add-Ins | COM Add-InsDisabled
File tab | OptionsDisabled
Microsoft Publisher 2016/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
Microsoft Visio 2013/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File Tab | Share | EmailEnabled
Insert tab | HyperlinkEnabled
Developer tab | MacrosEnabled
Developer tab | Visual BasicEnabled
File tab | OptionsEnabled
Microsoft Visio 2013/Visio Options/Advanced/Display
PolicySettingComment
Always offer 'Metric' and 'US units' for new blank drawings and stencilsEnabled
AngleEnabled
AngleDegrees
PolicySettingComment
Number of entries in the Recent Drawings listEnabled
Number of entries: 5
PolicySettingComment
Number of folders in the Recent Folders listEnabled
Number of folders: 5
PolicySettingComment
TextEnabled
TextPoints
Microsoft Visio 2013/Visio Options/Save/Save Documents
PolicySettingComment
Save Visio files asEnabled
Save Visio files asVisio Document
Microsoft Visio 2016/Disable Items in User Interface/Predefined
PolicySettingComment
Disable commandsEnabled
File Tab | Share | EmailEnabled
Insert tab | HyperlinkEnabled
Developer tab | MacrosEnabled
Developer tab | Visual BasicEnabled
File tab | OptionsEnabled
Microsoft Visio 2016/Visio Options/Advanced/Display
PolicySettingComment
Always offer 'Metric' and 'US units' for new blank drawings and stencilsEnabled
AngleEnabled
AngleDegrees
PolicySettingComment
Number of entries in the Recent Drawings listEnabled
Number of entries: 5
PolicySettingComment
Number of folders in the Recent Folders listEnabled
Number of folders: 5
PolicySettingComment
TextEnabled
TextPoints
Microsoft Visio 2016/Visio Options/Save/Save Documents
PolicySettingComment
Save Visio files asEnabled
Save Visio files asVisio Document
Microsoft Word 2013/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-Word-All0
SMARTInk-Word-All.vsto0
Microsoft Word 2013/Word Options/Advanced
PolicySettingComment
Allow background savesEnabled
Copy remotely stored files onto your computer, and update the remote file when savingEnabled
Number of documents in the Recent Documents listEnabled
Number of entries: 5
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Show bookmarksDisabled
Show measurements in units ofEnabled
Select units: Millimeters
PolicySettingComment
Show measurements in width of charactersEnabled
Typing replaces selected textEnabled
Use CTRL + Click to follow hyperlinkEnabled
Microsoft Word 2013/Word Options/Advanced/File Locations
PolicySettingComment
Default File LocationEnabled
DocumentsN:\
Microsoft Word 2013/Word Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft Word 2013/Word Options/Display
PolicySettingComment
Hidden textEnabled
Microsoft Word 2013/Word Options/Proofing
PolicySettingComment
Check grammar with spellingEnabled
Delay before starting background spelling checkerEnabled
Milliseconds (e.g. 5000 milliseconds = 5 seconds)5000
PolicySettingComment
Mark grammar errors as you typeEnabled
Check to enforce setting on; uncheck to enforce setting offEnabled
Color for marking grammatical errors 
Microsoft Word 2013/Word Options/Proofing/AutoCorrect
PolicySettingComment
Capitalize first letter of sentenceEnabled
Capitalize names of daysEnabled
Correct accidental usage of cAPS LOCK keyEnabled
Correct keyboard settingEnabled
Correct TWo INitial CApitalsEnabled
Microsoft Word 2013/Word Options/Save
PolicySettingComment
Default file formatEnabled
Save Word files asWord Document (*.docx)
PolicySettingComment
Save As Open XML in Compatibility ModeDisabled
Save AutoRecover infoEnabled
Save AutoRecover info every (minutes)10
Microsoft Word 2013/Word Options/Security/Trust Center
PolicySettingComment
Disable all application add-insDisabled
Require that application add-ins are signed by Trusted PublisherDisabled
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Microsoft Word 2016/Miscellaneous
PolicySettingComment
Block all unmanaged add-insEnabled
List of managed add-insEnabled
List of managed add-ins 
SMARTInk-Word-All0
SMARTInk-Word-All.vsto0
Microsoft Word 2016/Word Options/Advanced
PolicySettingComment
Allow background savesEnabled
Copy remotely stored files onto your computer, and update the remote file when savingEnabled
Number of documents in the Recent Documents listEnabled
Number of entries: 25
PolicySettingComment
Number of folders in the Recent Folders listEnabled
5
PolicySettingComment
Show bookmarksDisabled
Show measurements in units ofEnabled
Select units: Millimeters
PolicySettingComment
Show measurements in width of charactersEnabled
Typing replaces selected textEnabled
Use CTRL + Click to follow hyperlinkEnabled
Microsoft Word 2016/Word Options/Advanced/File Locations
PolicySettingComment
Default File LocationEnabled
DocumentsN:\
Microsoft Word 2016/Word Options/Customize Ribbon
PolicySettingComment
Display Developer tab in the RibbonEnabled
Microsoft Word 2016/Word Options/Display
PolicySettingComment
Hidden textEnabled
Microsoft Word 2016/Word Options/Proofing
PolicySettingComment
Check grammar with spellingEnabled
Delay before starting background spelling checkerEnabled
Milliseconds (e.g. 5000 milliseconds = 5 seconds)5000
PolicySettingComment
Mark grammar errors as you typeEnabled
Check to enforce setting on; uncheck to enforce setting offEnabled
Color for marking grammatical errorsGreen
Microsoft Word 2016/Word Options/Proofing/AutoCorrect
PolicySettingComment
Capitalize first letter of sentenceEnabled
Capitalize names of daysEnabled
Correct accidental usage of cAPS LOCK keyEnabled
Correct keyboard settingEnabled
Correct TWo INitial CApitalsEnabled
Microsoft Word 2016/Word Options/Save
PolicySettingComment
Default file formatEnabled
Save Word files asWord Document (*.docx)
PolicySettingComment
Save As Open XML in Compatibility ModeDisabled
Save AutoRecover infoEnabled
Save AutoRecover info every (minutes)10
Microsoft Word 2016/Word Options/Security/Trust Center
PolicySettingComment
Disable all application add-insEnabled
Require that application add-ins are signed by Trusted PublisherDisabled
Trust access to Visual Basic ProjectEnabled
VBA Macro Notification SettingsEnabled
Enable all macros (not recommended)
Windows Components/Attachment Manager
PolicySettingComment
Default risk level for file attachmentsEnabled
Set the default risk levelLow Risk
PolicySettingComment
Do not preserve zone information in file attachmentsEnabled
Hide mechanisms to remove zone informationDisabled
Inclusion list for low file typesEnabled
Specify low risk extensions (include a leading period, e.g. .bmp;.gif;)..exe;.zip;.bat;.cmd;.vbs;.ps1;.lnk
Windows Components/File Explorer
PolicySettingComment
Turn off caching of thumbnail picturesEnabled
Turn off the caching of thumbnails in hidden thumbs.db filesEnabled
Turn off the display of thumbnails and only display icons on network foldersDisabled
Windows Components/Remote Desktop Services/Remote Desktop Connection Client
PolicySettingComment
Specify SHA1 thumbprints of certificates representing trusted .rdp publishersEnabled
Comma-separated list of SHA1 trusted certificate thumbprints:‎I HAVE REMOVED THIS
Preferences
Windows Settings
Drive Maps
Drive Map (Drive: S)
S: (Order: 1)
General
ActionReplace
Properties
LetterS
Location\\ccc-svr-sims\SIMS
ReconnectDisabled
Use first availableDisabled
Hide/Show this driveShow
Hide/Show all drivesNo change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Windows Server 2016 TP Session Hosts
sidS-1-5-21-995727763-671734855-2888410724-22578
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Terminal Server {ST}
sidS-1-5-21-995727763-671734855-2888410724-22118
userContext0
primaryGroup0
localGroup0
Drive Map (Drive: T)
T: (Order: 2)
General
ActionReplace
Properties
LetterT
Location\\shared\StaffShared
ReconnectDisabled
Use first availableDisabled
Hide/Show this driveShow
Hide/Show all drivesNo change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Windows Server 2016 TP Session Hosts
sidS-1-5-21-995727763-671734855-2888410724-22578
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Terminal Server {ST}
sidS-1-5-21-995727763-671734855-2888410724-22118
userContext0
primaryGroup0
localGroup0
Drive Map (Drive: W)
W: (Order: 3)
General
ActionReplace
Properties
LetterW
Location\\shared\SharedDocuments
ReconnectDisabled
Use first availableDisabled
Hide/Show this driveShow
Hide/Show all drivesNo change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Windows Server 2016 TP Session Hosts
sidS-1-5-21-995727763-671734855-2888410724-22578
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Terminal Server {ST}
sidS-1-5-21-995727763-671734855-2888410724-22118
userContext0
primaryGroup0
localGroup0
Drive Map (Drive: X)
X: (Order: 4)
General
ActionReplace
Properties
LetterX
Location\\shared\TSTResources
ReconnectDisabled
Use first availableDisabled
Hide/Show this driveShow
Hide/Show all drivesNo change
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Security Group
AttributeValue
boolAND
not0
nameCHURCHILLCC\CC4 Virtual Machine {ST}
sidS-1-5-21-995727763-671734855-2888410724-22472
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Windows Server 2016 TP Session Hosts
sidS-1-5-21-995727763-671734855-2888410724-22578
userContext0
primaryGroup0
localGroup0
Item-level targeting: Security Group
AttributeValue
boolOR
not0
nameCHURCHILLCC\Terminal Server {ST}
sidS-1-5-21-995727763-671734855-2888410724-22118
userContext0
primaryGroup0
localGroup0
Files
File (Target Path: %USERPROFILE%\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites)
exception.sites (Order: 1)
General
ActionReplace
Properties
Source file(s)\\ccc-svr-001\SYSVOL\CHURCHILLCC.ORG\scripts\Java\Java7Restrict\exception.sites
Destination file%USERPROFILE%\AppData\LocalLow\Sun\Java\Deployment\security\exception.sites
Suppress errors on individual file actionsDisabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
File (Target Path: N:\desktop.ini)
desktop.ini (Order: 2)
General
ActionDelete
Properties
Destination fileN:\desktop.ini
Suppress errors on individual file actionsEnabled
Attributes
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)Yes
Apply once and do not reapplyNo
Item-level targeting: File Match
AttributeValue
boolAND
not0
pathN:\desktop.ini
typeEXISTS
folder0
Folders
Folder (Path: %userprofile%\AppData\LocalLow\Sun\Java\Deployment\security)
security (Order: 1)
General
ActionCreate
Attributes
Path%userprofile%\AppData\LocalLow\Sun\Java\Deployment\security
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: File Match
AttributeValue
boolAND
not1
path%userprofile%\AppData\LocalLow\Sun\Java\Deployment\security
typeEXISTS
folder1
Folder (Path: %userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs)
Programs (Order: 2)
General
ActionCreate
Attributes
Path%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
Read-onlyDisabled
HiddenDisabled
ArchiveEnabled
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: File Match
AttributeValue
boolAND
not1
path%userprofile%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
typeEXISTS
folder1
Registry
Collection: HKEY_CURRENT_USER/Software/Microsoft/Office/15.0/PowerPoint/Options
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: UseMonMgr
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\PowerPoint\Options
Value nameUseMonMgr
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_CURRENT_USER
keySoftware\Microsoft\Office\15.0
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Collection: HKEY_CURRENT_USER/Software/Microsoft/Office/15.0/Word/StatusBar
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: Section
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\Word\StatusBar
Value nameSection
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Microsoft\Office\15.0\Word
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Registry item: CapsLock
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\Word\StatusBar
Value nameCapsLock
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Microsoft\Office\15.0\Word
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Registry item: Line
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\Word\StatusBar
Value nameLine
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Item-level targeting: Registry Match
AttributeValue
boolAND
not0
typeKEYEXISTS
hiveHKEY_LOCAL_MACHINE
keySOFTWARE\Microsoft\Office\15.0\Word
valueName
valueType
valueData
min0.0.0.0
max0.0.0.0
gte1
lte0
Registry item: ExtendSelection
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\Word\StatusBar
Value nameExtendSelection
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_CURRENT_USER/Software/Microsoft/Office/15.0/Common/General
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: SkipOpenAndSaveAsPlace
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Microsoft\Office\15.0\Common\General
Value nameSkipOpenAndSaveAsPlace
Value typeREG_DWORD
Value data0x1 (1)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_CURRENT_USER/Software/Microsoft/Windows NT/CurrentVersion/Windows
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: Windows
General
ActionReplace
Properties
HiveHKEY_LOCAL_MACHINE
Key pathSOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
Value name(Default)
Value typeREG_SZ
Value data
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_CURRENT_USER/Software/Intel/Display/igfxcui/HotKeys
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: Enable
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Intel\Display\igfxcui\HotKeys
Value nameEnable
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_CURRENT_USER/Software/Google/Chrome/Metro
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: launch_mode
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\Google\Chrome\Metro
Value namelaunch_mode
Value typeREG_DWORD
Value data0x0 (0)
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Collection: HKEY_CURRENT_USER/Software/RealVNC/vncviewer
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Registry item: EulaAccepted
General
ActionReplace
Properties
HiveHKEY_CURRENT_USER
Key pathSoftware\RealVNC\vncviewer
Value nameEulaAccepted
Value typeREG_SZ
Value datadb346d1e0fd4a6d2872111de6217b84d04adc9e0
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Remove this item when it is no longer appliedNo
Apply once and do not reapplyNo
Control Panel Settings
Printers
Local Printer (Name: Fax)
Fax (Order: 1)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Local Printer (Name: Microsoft XPS Document Writer)
Microsoft XPS Document Writer (Order: 2)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Local Printer (Name: Send To OneNote)
Send To OneNote (Order: 3)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Local Printer (Name: SMART Notebook Document Writer)
SMART Notebook Document Writer (Order: 4)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo
Local Printer (Name: Send To OneNote 2013)
Send To OneNote 2013 (Order: 5)
General
ActionDelete
Common
Options
Stop processing items on this extension if an error occurs on this itemNo
Run in logged-on user's security context (user policy option)No
Apply once and do not reapplyNo