| Group Policy Results | |
| BGFA\lmi123 on BGFA\BGF001 | |
| Data collected on: 19/04/2018 10:37:13 | |
| During last computer policy refresh on 19/04/2018 09:22:23 | |||||||||||||||||||||||||
|
| During last user policy refresh on 11/04/2018 17:18:55 | |||
|
| Computer name | BGFA\BGF001 |
| Domain | bgfa.internal |
| Site | Default-First-Site-Name |
| Organizational Unit | bgfa.internal/Locations/Site/Main Office |
| Security Group Membership |
show
BUILTIN\Administrators
Everyone BGF001\SophosUser BUILTIN\Users NT AUTHORITY\NETWORK NT AUTHORITY\Authenticated Users NT AUTHORITY\This Organization BGFA\BGF001$ BGFA\Domain Computers Authentication authority asserted identity Mandatory Label\System Mandatory Level |
| Component Name | Status | Time Taken | Last Process Time | Event Log | ||
|---|---|---|---|---|---|---|
| Group Policy Infrastructure | Success | 663 Millisecond(s) | 19/04/2018 09:22:23 | View Log | ||
| Deployed Printer Connections | Success | 31 Millisecond(s) | 19/04/2018 09:22:23 | View Log | ||
| Group Policy Registry | Success | 156 Millisecond(s) | 19/04/2018 09:22:23 | View Log | ||
| Group Policy Shortcuts | Success | 78 Millisecond(s) | 19/04/2018 09:22:23 | View Log | ||
| Registry | Success | 05/04/2018 16:56:54 | ||||
| Security | Success | 05/04/2018 16:56:55 | ||||
| Software Installation | Pending | 109 Millisecond(s) | 19/04/2018 09:22:23 | View Log | ||
| ||||||
| Winning GPO | Adobe Software |
| Name | Adobe AIR |
| Version | 28.0 |
| Language | English (United States) |
| Platform | x86 |
| Support URL |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\bgf-sr-003\applic$\Adobe\Air28.0\setup.msi |
| Uninstall this application when it falls out of the scope of management | Enabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Disabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {10166660-0c51-4355-bd74-d4700efdb83b} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | BGFA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | BGFA\Domain Admins | Read, Write | Yes |
| Allow | BGFA\Enterprise Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| |||||
| Transforms |
|---|
| None |
| This application was applied due to the following conditions: |
|---|
| The application was assigned. |
| Its language matched the system language. |
| Winning GPO | Adobe Software |
| Name | Adobe Flash Player 28 ActiveX |
| Version | 28.0 |
| Language | English (United States) |
| Platform | x86 |
| Support URL | http://www.adobe.com/go/flashplayer_support/ |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\bgf-sr-003\applic$\Adobe\FlashPlayer28.0.0.126\IE-ActiveX\install_flash_player_28_active_x.msi |
| Uninstall this application when it falls out of the scope of management | Enabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Disabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {6dd0c815-c939-4082-9bbf-629e0eb91b5c} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | BGFA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | BGFA\Domain Admins | Read, Write | Yes |
| Allow | BGFA\Enterprise Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| |||||
| Transforms |
|---|
| None |
| This application was applied due to the following conditions: |
|---|
| The application was assigned. |
| Its language matched the system language. |
| Winning GPO | Adobe Software |
| Name | Adobe Flash Player 28 NPAPI |
| Version | 28.0 |
| Language | English (United States) |
| Platform | x86 |
| Support URL | http://www.adobe.com/go/flashplayer_support/ |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\bgf-sr-003\applic$\Adobe\FlashPlayer28.0.0.126\Opera&ChromiumPPAPI\install_flash_player_28_plugin.msi |
| Uninstall this application when it falls out of the scope of management | Enabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Disabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {cd50188c-689d-40e5-b7d0-b7c792753ef4} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | BGFA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | BGFA\Domain Admins | Read, Write | Yes |
| Allow | BGFA\Enterprise Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| |||||
| Transforms |
|---|
| None |
| This application was applied due to the following conditions: |
|---|
| The application was assigned. |
| Its language matched the system language. |
| Winning GPO | Adobe Software |
| Name | Adobe Shockwave Player 12.3 |
| Version | 12.3 |
| Language | English (United States) |
| Platform | x86 |
| Support URL | http://www.adobe.com/support/shockwave |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\bgf-sr-003\applic$\Adobe\Shockwave12.3\sw_lic_full_installer.msi |
| Uninstall this application when it falls out of the scope of management | Enabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Enabled |
| Include OLE class and product information | Disabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {175d1c2e-cef4-4909-901d-52af3cd8ecd2} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | BGFA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | BGFA\Domain Admins | Read, Write | Yes |
| Allow | BGFA\Enterprise Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| |||||
| Transforms |
|---|
| None |
| This application was applied due to the following conditions: |
|---|
| The application was assigned. |
| Its language matched the system language. |
| Winning GPO | Google Chrome |
| Name | Google Chrome |
| Version | 66.219 |
| Language | English (United States) |
| Platform | x64 |
| Support URL |
| General | Setting |
|---|---|
| Deployment type | Assigned |
| Deployment source | \\bgf-sr-003\applic$\GoogleChrome\googlechromestandaloneenterprise64.msi |
| Uninstall this application when it falls out of the scope of management | Enabled |
| Advanced Deployment Options | Setting |
|---|---|
| Ignore language when deploying this package | Disabled |
| Make this 32-bit X86 application available to Win64 computers | Disabled |
| Include OLE class and product information | Disabled |
| Diagnostic Information | Setting |
|---|---|
| Product code | {be40b3e0-129e-313c-b663-94c192c5143f} |
| Deployment Count | 0 |
| Type | Name | Permission | Inherited |
|---|---|---|---|
| Allow | BGFA\Domain Admins | Full control | No |
| Allow | NT AUTHORITY\Authenticated Users | Read | No |
| Allow | NT AUTHORITY\SYSTEM | Full control | No |
| Allow | BGFA\Domain Admins | Read, Write | Yes |
| Allow | BGFA\Enterprise Admins | Read, Write | Yes |
| Allow | NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | Yes |
| Allow | NT AUTHORITY\Authenticated Users | Read | Yes |
| Allow | NT AUTHORITY\SYSTEM | Read, Write | Yes |
| Allow | BGFA\lmi123 | Read, Write | Yes |
| Allow | CREATOR OWNER | Read, Write | Yes |
| Allow inheritable permissions from the parent to propagate to this object and all child objects | Enabled |
| Upgrades | Setting | ||||
|---|---|---|---|---|---|
| Required upgrade for existing packages | Enabled | ||||
| |||||
| |||||
| Transforms |
|---|
| None |
| This application was applied due to the following conditions: |
|---|
| The application was assigned. |
| Its language matched the system language. |
| Policy | Setting | Winning GPO |
|---|---|---|
| Password must meet complexity requirements | Disabled | Default Domain Policy |
| Store passwords using reversible encryption | Disabled | Default Domain Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Account lockout threshold | 0 invalid logon attempts | Default Domain Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Audit account logon events | Success, Failure | Logon Policy |
| Audit logon events | Success, Failure | Logon Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Allow log on through Terminal Services | BGFA\AdminStaffGroup, Everyone | Enable RDC |
| Policy | Setting | Winning GPO |
|---|---|---|
| Interactive logon: Do not require CTRL+ALT+DEL | Disabled | Logon Policy |
| Interactive logon: Message text for users attempting to log on | Please note that you are logging on to a, Blue Gate Fields Infant School administration computer., Only authenticated users should use this system. If you are not, an authorised member of office staff, please log off immediately. | Logon Policy |
| Interactive logon: Message title for users attempting to log on | Logon Message | Logon Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Network access: Allow anonymous SID/Name translation | Disabled | Default Domain Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Network security: Do not store LAN Manager hash value on next password change | Enabled | Default Domain Policy |
| Network security: Force logoff when logon hours expire | Disabled | Default Domain Policy |
| Policy | Setting | Winning GPO | ||||||
|---|---|---|---|---|---|---|---|---|
| Automatic certificate management | Enabled | [Default setting] | ||||||
| ||||||||
| Issued To | Issued By | Expiration Date | Intended Purposes | Winning GPO |
|---|---|---|---|---|
| administrator | administrator | 05/02/2117 11:55:55 | File Recovery | Default Domain Policy |
| Policy | Setting | Winning GPO |
|---|---|---|
| Policy version | 2.26 | Disable Firewall |
| Disable stateful FTP | Not Configured | |
| Disable stateful PPTP | Not Configured | |
| IPsec exempt | Not Configured | |
| IPsec through NAT | Not Configured | |
| Preshared key encoding | Not Configured | |
| SA idle time | Not Configured | |
| Strong CRL check | Not Configured |
| Policy | Setting | Winning GPO |
|---|---|---|
| Firewall state | Off | Disable Firewall |
| Inbound connections | Not Configured | |
| Outbound connections | Not Configured | |
| Apply local firewall rules | Not Configured | |
| Apply local connection security rules | Not Configured | |
| Display notifications | Not Configured | |
| Allow unicast responses | Not Configured | |
| Log dropped packets | Not Configured | |
| Log successful connections | Not Configured | |
| Log file path | Not Configured | |
| Log file maximum size (KB) | Not Configured |
| Path | Winning GPO |
|---|---|
| \\bgf-sr-003\bgf-prn-01 | MainOfficePrinters |
| \\bgf-sr-003\bgf-prn-03 | MainOfficePrinters |
| Policy | Setting | Winning GPO | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Force a specific default lock screen and logon image | Enabled | Logon Policy | ||||||||||
| ||||||||||||
| Policy | Setting | Winning GPO |
|---|---|---|
| Enable Bookmark Bar | Enabled | Google Chrome |
| Enable reporting of usage and crash-related data | Disabled | Google Chrome |
| Show Home button on toolbar | Enabled | Google Chrome |
| Policy | Setting | Winning GPO |
|---|---|---|
| Show Home button on toolbar | Enabled | Google Chrome |
| Policy | Setting | Winning GPO | ||
|---|---|---|---|---|
| Configure the home page URL | Enabled | Google Chrome | ||
| ||||
| Policy | Setting | Winning GPO | ||||
|---|---|---|---|---|---|---|
| Configure the list of force-installed apps and extensions | Enabled | Google Chrome | ||||
| ||||||
| Policy | Setting | Winning GPO | ||
|---|---|---|---|---|
| Configure the home page URL | Enabled | Google Chrome | ||
| ||||
| Policy | Setting | Winning GPO | ||||
|---|---|---|---|---|---|---|
| Action on startup | Enabled | Google Chrome | ||||
| ||||||
| Policy | Setting | Winning GPO | ||||
| URLs to open on startup | Enabled | Google Chrome | ||||
| ||||||
| Policy | Setting | Winning GPO | ||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Windows Defender Firewall: Allow inbound Remote Desktop exceptions | Enabled | Enable RDC | ||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||
| Policy | Setting | Winning GPO | ||||||||||||||||||||||||||||
| Windows Defender Firewall: Protect all network connections | Disabled | Disable Firewall | ||||||||||||||||||||||||||||
| Policy | Setting | Winning GPO | ||
|---|---|---|---|---|
| Select the Power button action (on battery) | Enabled | PowerConfig | ||
| ||||
| Policy | Setting | Winning GPO | ||
| Select the Sleep button action (on battery) | Enabled | PowerConfig | ||
| ||||
| Policy | Setting | Winning GPO | ||
| Select the Sleep button action (plugged in) | Disabled | PowerConfig | ||
| Select the Start menu Power button action (on battery) | Enabled | PowerConfig | ||
| ||||
| Policy | Setting | Winning GPO | ||
| Select the Start menu Power button action (plugged in) | Enabled | PowerConfig | ||
| ||||
| Policy | Setting | Winning GPO |
|---|---|---|
| Allow standby states (S1-S3) when sleeping (on battery) | Disabled | PowerConfig |
| Allow standby states (S1-S3) when sleeping (plugged in) | Disabled | PowerConfig |
| Specify the system hibernate timeout (plugged in) | Disabled | PowerConfig |
| Specify the system sleep timeout (plugged in) | Disabled | PowerConfig |
| Specify the unattended sleep timeout (plugged in) | Disabled | PowerConfig |
| Turn off hybrid sleep (on battery) | Enabled | PowerConfig |
| Turn off hybrid sleep (plugged in) | Enabled | PowerConfig |
| Policy | Setting | Winning GPO | ||
|---|---|---|---|---|
| Set a default associations configuration file | Enabled | Google Chrome Default Browser | ||
| ||||
| Policy | Setting | Winning GPO | ||
| Show hibernate in the power options menu | Disabled | Start Menu & Task Bar Pol | ||
| Show lock in the user tile menu | Disabled | Start Menu & Task Bar Pol | ||
| Start File Explorer with ribbon minimized | Enabled | Start Menu & Task Bar Pol | ||
| ||||
| Policy | Setting | Winning GPO |
|---|---|---|
| Allow users to connect remotely by using Remote Desktop Services | Enabled | Enable RDC |
| Winning GPO | AdminDesktopIcons |
| Action | Update |
| Target type | URL |
| Shortcut path | C:\Users\Default\Desktop\C\Users\Administrator\Desktop\.url |
| Target URL | https://scholarpack6.co.uk/bluegatefieldsinfants/main/index_html |
| Icon path | C:\WINDOWS\System32\SHELL32.dll |
| Icon index | 14 |
| Shortcut key | None |
| Run | Normal window |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Group Policy Shortcuts Group Policy Infrastructure |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (4), SYSVOL (4) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Software Installation |
| Enforced | No |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (12), SYSVOL (12) |
| WMI Filter |
| Link Location | bgfa.internal |
| Extensions Configured | {B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A} Security Registry |
| Enforced | No |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (15), SYSVOL (15) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Registry |
| Enforced | No |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (4), SYSVOL (4) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Security Registry |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (5), SYSVOL (5) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Software Installation Registry |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (12), SYSVOL (12) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Registry |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (1), SYSVOL (1) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Security Registry |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (13), SYSVOL (13) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site/Main Office |
| Extensions Configured | Deployed Printer Connections |
| Enforced | No |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (2), SYSVOL (2) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Registry |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (12), SYSVOL (12) |
| WMI Filter |
| Link Location | bgfa.internal/Locations/Site |
| Extensions Configured | Group Policy Registry Registry Group Policy Infrastructure |
| Enforced | Yes |
| Disabled | None |
| Security Filters | NT AUTHORITY\Authenticated Users |
| Revision | AD (9), SYSVOL (9) |
| WMI Filter |
| Name | Value | Reference GPO(s) |
|---|---|---|
| None | ||
| User name | BGFA\lmi123 |
| Domain | bgfa.internal |
| Security Group Membership |
show
BGFA\Domain Users
Everyone BGF001\SophosAdministrator BGF001\SophosUser BUILTIN\Administrators BUILTIN\Users NT AUTHORITY\INTERACTIVE CONSOLE LOGON NT AUTHORITY\Authenticated Users NT AUTHORITY\This Organization LOCAL Authentication authority asserted identity BGFA\SophosUser BGFA\SophosAdministrator Mandatory Label\High Mandatory Level |
| Component Name | Status | Time Taken | Last Process Time | Event Log |
|---|---|---|---|---|
| Group Policy Infrastructure | Success | 11/04/2018 17:18:55 |
| Name | Value | Reference GPO(s) |
|---|---|---|
| None | ||