189 lines
20 KiB
XML
189 lines
20 KiB
XML
<?xml version="1.0" encoding="utf-16"?>
|
||
<GPO xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.microsoft.com/GroupPolicy/Settings">
|
||
<Identifier>
|
||
<Identifier xmlns="http://www.microsoft.com/GroupPolicy/Types">{4375EFBD-38B3-4E79-91BE-197A34B8B892}</Identifier>
|
||
<Domain xmlns="http://www.microsoft.com/GroupPolicy/Types">azureblog.pl</Domain>
|
||
</Identifier>
|
||
<Name>Tier0 PAW Configuration - User PAC</Name>
|
||
<IncludeComments>true</IncludeComments>
|
||
<CreatedTime>2020-05-23T17:58:44</CreatedTime>
|
||
<ModifiedTime>2020-05-23T18:01:51</ModifiedTime>
|
||
<ReadTime>2020-05-23T19:05:54.9588825Z</ReadTime>
|
||
<SecurityDescriptor>
|
||
<SDDL xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">O:DAG:DAD:PAI(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;S-1-5-21-657827913-1895599540-1755036276-519)(A;CI;LCRPLORC;;;ED)(A;CI;LCRPLORC;;;AU)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;CO)S:AI(OU;CIIDSA;WPWD;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;WD)(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)</SDDL>
|
||
<Owner xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-657827913-1895599540-1755036276-512</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">AZUREBLOG\Domain Admins</Name>
|
||
</Owner>
|
||
<Group xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-657827913-1895599540-1755036276-512</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">AZUREBLOG\Domain Admins</Name>
|
||
</Group>
|
||
<PermissionsPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">true</PermissionsPresent>
|
||
<Permissions xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
|
||
<InheritsFromParent>false</InheritsFromParent>
|
||
<TrusteePermissions>
|
||
<Trustee>
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-9</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</Name>
|
||
</Trustee>
|
||
<Type xsi:type="PermissionType">
|
||
<PermissionType>Allow</PermissionType>
|
||
</Type>
|
||
<Inherited>false</Inherited>
|
||
<Applicability>
|
||
<ToSelf>true</ToSelf>
|
||
<ToDescendantObjects>false</ToDescendantObjects>
|
||
<ToDescendantContainers>true</ToDescendantContainers>
|
||
<ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
|
||
</Applicability>
|
||
<Standard>
|
||
<GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum>
|
||
</Standard>
|
||
<AccessMask>0</AccessMask>
|
||
</TrusteePermissions>
|
||
<TrusteePermissions>
|
||
<Trustee>
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-18</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\SYSTEM</Name>
|
||
</Trustee>
|
||
<Type xsi:type="PermissionType">
|
||
<PermissionType>Allow</PermissionType>
|
||
</Type>
|
||
<Inherited>false</Inherited>
|
||
<Applicability>
|
||
<ToSelf>true</ToSelf>
|
||
<ToDescendantObjects>false</ToDescendantObjects>
|
||
<ToDescendantContainers>true</ToDescendantContainers>
|
||
<ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
|
||
</Applicability>
|
||
<Standard>
|
||
<GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
|
||
</Standard>
|
||
<AccessMask>0</AccessMask>
|
||
</TrusteePermissions>
|
||
<TrusteePermissions>
|
||
<Trustee>
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-657827913-1895599540-1755036276-512</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">AZUREBLOG\Domain Admins</Name>
|
||
</Trustee>
|
||
<Type xsi:type="PermissionType">
|
||
<PermissionType>Allow</PermissionType>
|
||
</Type>
|
||
<Inherited>false</Inherited>
|
||
<Applicability>
|
||
<ToSelf>true</ToSelf>
|
||
<ToDescendantObjects>false</ToDescendantObjects>
|
||
<ToDescendantContainers>true</ToDescendantContainers>
|
||
<ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
|
||
</Applicability>
|
||
<Standard>
|
||
<GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
|
||
</Standard>
|
||
<AccessMask>0</AccessMask>
|
||
</TrusteePermissions>
|
||
<TrusteePermissions>
|
||
<Trustee>
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-11</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\Authenticated Users</Name>
|
||
</Trustee>
|
||
<Type xsi:type="PermissionType">
|
||
<PermissionType>Allow</PermissionType>
|
||
</Type>
|
||
<Inherited>false</Inherited>
|
||
<Applicability>
|
||
<ToSelf>true</ToSelf>
|
||
<ToDescendantObjects>false</ToDescendantObjects>
|
||
<ToDescendantContainers>true</ToDescendantContainers>
|
||
<ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
|
||
</Applicability>
|
||
<Standard>
|
||
<GPOGroupedAccessEnum>Apply Group Policy</GPOGroupedAccessEnum>
|
||
</Standard>
|
||
<AccessMask>0</AccessMask>
|
||
</TrusteePermissions>
|
||
<TrusteePermissions>
|
||
<Trustee>
|
||
<SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-657827913-1895599540-1755036276-519</SID>
|
||
<Name xmlns="http://www.microsoft.com/GroupPolicy/Types">AZUREBLOG\Enterprise Admins</Name>
|
||
</Trustee>
|
||
<Type xsi:type="PermissionType">
|
||
<PermissionType>Allow</PermissionType>
|
||
</Type>
|
||
<Inherited>false</Inherited>
|
||
<Applicability>
|
||
<ToSelf>true</ToSelf>
|
||
<ToDescendantObjects>false</ToDescendantObjects>
|
||
<ToDescendantContainers>true</ToDescendantContainers>
|
||
<ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
|
||
</Applicability>
|
||
<Standard>
|
||
<GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
|
||
</Standard>
|
||
<AccessMask>0</AccessMask>
|
||
</TrusteePermissions>
|
||
</Permissions>
|
||
<AuditingPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">false</AuditingPresent>
|
||
</SecurityDescriptor>
|
||
<FilterDataAvailable>true</FilterDataAvailable>
|
||
<Computer>
|
||
<VersionDirectory>2</VersionDirectory>
|
||
<VersionSysvol>2</VersionSysvol>
|
||
<Enabled>true</Enabled>
|
||
</Computer>
|
||
<User>
|
||
<VersionDirectory>2</VersionDirectory>
|
||
<VersionSysvol>2</VersionSysvol>
|
||
<Enabled>true</Enabled>
|
||
<ExtensionData>
|
||
<Extension xmlns:q1="http://www.microsoft.com/GroupPolicy/Settings/Windows/Registry" xsi:type="q1:RegistrySettings">
|
||
<q1:RegistrySettings clsid="{A3CCFC41-DFDB-43a5-8D26-0FE8B954DA51}">
|
||
<q1:Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="AutoConfigURL" status="AutoConfigURL" image="6" changed="2020-05-23 17:19:42" uid="{C9B7F6A8-F9F9-4529-84A2-820A6C4EF291}" removePolicy="1" bypassErrors="1">
|
||
<q1:GPOSettingOrder>1</q1:GPOSettingOrder>
|
||
<q1:Properties action="R" displayDecimal="1" default="0" hive="HKEY_CURRENT_USER" key="Software\Microsoft\Windows\CurrentVersion\Internet Settings" name="AutoConfigURL" type="REG_SZ" value="file://azureblog.pl/SYSVOL/azureblog.pl/scripts/proxy.pac">
|
||
<q1:Values />
|
||
</q1:Properties>
|
||
<q1:Filters>
|
||
<q1:FilterGroup bool="AND" not="0" name="AZUREBLOG\Tier0PAWUsers" sid="S-1-5-21-657827913-1895599540-1755036276-3101" userContext="1" primaryGroup="0" localGroup="0" />
|
||
</q1:Filters>
|
||
</q1:Registry>
|
||
</q1:RegistrySettings>
|
||
</Extension>
|
||
<Name>Windows Registry</Name>
|
||
</ExtensionData>
|
||
<ExtensionData>
|
||
<Extension xmlns:q2="http://www.microsoft.com/GroupPolicy/Settings/Registry" xsi:type="q2:RegistrySettings">
|
||
<q2:Policy>
|
||
<q2:Name>Disable changing Automatic Configuration settings</q2:Name>
|
||
<q2:State>Enabled</q2:State>
|
||
<q2:Explain>This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Explorer. This setting specifies that Internet explorer use the configuration settings provided in a file by the system administrator.
|
||
|
||
If you enable this policy setting, the user will not be able to do automatic configuration. You can import your current connection settings from your machine using Internet Explorer Maintenance under Admin Templates using group policy editor.
|
||
|
||
If you disable or do no configure this policy setting, the user will have the freedom to automatically configure these settings.</q2:Explain>
|
||
<q2:Supported>At least Internet Explorer 5.0</q2:Supported>
|
||
<q2:Category>Windows Components/Internet Explorer</q2:Category>
|
||
</q2:Policy>
|
||
<q2:Policy>
|
||
<q2:Name>Prevent changing proxy settings</q2:Name>
|
||
<q2:State>Enabled</q2:State>
|
||
<q2:Explain>This policy setting specifies if a user can change proxy settings.
|
||
|
||
If you enable this policy setting, the user will not be able to configure proxy settings.
|
||
|
||
If you disable or do not configure this policy setting, the user can configure proxy settings.</q2:Explain>
|
||
<q2:Supported>At least Internet Explorer 5.0</q2:Supported>
|
||
<q2:Category>Windows Components/Internet Explorer</q2:Category>
|
||
</q2:Policy>
|
||
<q2:Blocked>false</q2:Blocked>
|
||
</Extension>
|
||
<Name>Registry</Name>
|
||
</ExtensionData>
|
||
</User>
|
||
<LinksTo>
|
||
<SOMName>Accounts</SOMName>
|
||
<SOMPath>azureblog.pl/Admin/Tier0/Accounts</SOMPath>
|
||
<Enabled>true</Enabled>
|
||
<NoOverride>false</NoOverride>
|
||
</LinksTo>
|
||
</GPO> |