Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Defender Exceptions
Data collected on: 3/13/2024 9:56:44 AM
General
Details
Domainfoo.local
OwnerFOO\Domain Admins
Created5/19/2017 9:58:10 AM
Modified3/13/2024 9:56:16 AM
User Revisions3 (AD), 3 (SYSVOL)
Computer Revisions255 (AD), 255 (SYSVOL)
Unique ID{13072EAD-C9F9-42D1-BF4C-DA2F3E44E220}
GPO StatusEnabled
Links
LocationEnforcedLink StatusPath
Win10NoEnabledfoo.local/Lab Enviroment/Desktops/Win10

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:
Name
NT AUTHORITY\Authenticated Users
Delegation
These groups and users have the specified permission for this GPO
NameAllowed PermissionsInherited
FOO\Domain AdminsEdit settings, delete, modify securityNo
FOO\Enterprise AdminsEdit settings, delete, modify securityNo
NT AUTHORITY\Authenticated UsersRead (from Security Filtering)No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERSReadNo
NT AUTHORITY\SYSTEMEdit settings, delete, modify securityNo
Computer Configuration (Enabled)
Policies
Windows Settings
Scripts
Startup
For this GPO, Script order: Not configured
NameParameters
\\YOURFILESERVER\profileUnity\Scripts\Defender\Onboard-NonPersistentMachine.ps1
Security Settings
System Services
Application Identity (Startup Mode: Automatic)
Permissions
No permissions specified
Auditing
No auditing specified
Application Control Policies
Appx Rules
PolicySetting
Enforce rules of this typeTrue

ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All signed packaged appsPublisherNo
Dll Rules
No rules of type 'Dll Rules' are defined.
Executable Rules
PolicySetting
Enforce rules of this typeTrue

ActionUserNameRule TypeExceptions
AllowEveryoneFlexapp Program FilesPathNo
AllowEveryoneFlexapp Program Files (x86)PathNo
AllowEveryone(Default Rule) All files located in the Program Files folderPathNo
AllowEveryone(Default Rule) All files located in the Windows folderPathNo
AllowEveryoneC:\Windows\SystemApps\*PathNo
AllowBUILTIN\Administrators(Default Rule) All filesPathNo
Windows Installer Rules
ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All digitally signed Windows Installer filesPublisherNo
AllowEveryone(Default Rule) All Windows Installer files in %systemdrive%\Windows\InstallerPathNo
AllowBUILTIN\Administrators(Default Rule) All Windows Installer filesPathNo
Script Rules
ActionUserNameRule TypeExceptions
AllowEveryone(Default Rule) All scripts located in the Program Files folderPathNo
AllowEveryone(Default Rule) All scripts located in the Windows folderPathNo
AllowBUILTIN\Administrators(Default Rule) All scriptsPathNo
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Windows Components/Windows Defender Antivirus
PolicySettingComment
Allow antimalware service to startup with normal priorityDisabled
Randomize scheduled task timesEnabled
Windows Components/Windows Defender Antivirus/Exclusions
PolicySettingComment
Extension ExclusionsEnabled
Extension Exclusions 
vhdx0
vhd0
manifest0
lou0
lbr0
cat0
cap0
7zip0
7z0
PolicySettingComment
Path ExclusionsEnabled
Path Exclusions 
\\YOURFILESERVER\ProfileShare\*0
\\YOURFILESERVER\profileUnity\FlexApps0
\\YOURFILESERVER\profileUnity\Machine0
\\YOURFILESERVER\profileUnity\User0
\Device\HarddiskVolume*\*\AppData\*0
\Device\HarddiskVolume*\*\Volumes\C\Program Files (x86)\*0
\Device\HarddiskVolume*\*\Volumes\C\Program Files\*0
\Device\HarddiskVolume*\*\Volumes\C\ProgramData\*0
\Device\HarddiskVolume*\*\Volumes\C\ProgramData\Microsoft\Windows\Start Menu\Programs0
\Device\HarddiskVolume*\*\Volumes\C\Windows\*0
C:\DiskShadowData0
C:\FADIA-T0
C:\FADIA-T\VHDW\*\0
C:\FlexAppDIA-Temp0
C:\ProfileDisk_Temp0
C:\ProfileDiskMounts\*\*\0
C:\Program Files (x86)\*0
C:\Program Files\*0
C:\Program Files\ProfileUnity0
C:\Program Files\Profileunity\Client.Net0
C:\Program Files\ProfileUnity\Elevation0
C:\Program Files\ProfileUnity\FlexApp0
C:\Program Files\ProfileUnity\FlexApp\ContainterService0
C:\Program Files\ProfileUnity\FlexApp\CTL\0
C:\Program Files\ProfileUnity\Profile0
C:\Program Files\ProfileUnity\Temp\Pupsync0
C:\Program Files\VMware\VMware Tools\0
C:\Program Files\WindowsApps\0
C:\ProgramData\Liquidware\0
C:\ProgramData\Microsoft\Windows Defender\Platform\*\0
C:\ProgramData\Microsoft\Windows\AppRepository\Packages\0
C:\ProgramData\Microsoft\Windows\Start Menu\Programs0
C:\ProUx0
C:\Users\ProfileDisk0
C:\Windows\Microsoft.NET0
C:\Windows\System32\*0
C:\Windows\SystemApps\0
C:\Windows\SysWOW64\*0
C:\Windows\Temp\flexappdia0
c:\windows\temp\profileunity\0
C:\ProgramData\Microsoft\Windows Defender\Scans0
C:\ProgramData\Microsoft\Windows Defender Advanced Threat Protection0
C:\ProgramData\Microsoft\Search0
PolicySettingComment
Process ExclusionsEnabled
Process Exclusions 
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\*\msedgewebview2.exe0
C:\Program Files\ProfileUnity\client.exe0
C:\Program Files\Profileunity\Client.Net\7z.exe0
C:\Program Files\Profileunity\Client.Net\7za.exe0
C:\Program Files\Profileunity\Client.Net\LouZip.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.CmdService.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Configure.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Diagnostic.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.FlexAppCleanup.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.LicenseService.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.Logoff.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Notification.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.Refresh.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.RunOnce.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Service.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.ServiceManager.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Shortcut.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.ShortcutCleanup.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.ShortcutImporter.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.Splash.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.Startup.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.Startup.Update.exe0
C:\Program Files\Profileunity\Client.Net\LwL.ProfileUnity.Client.TokenCache.exe0
C:\Program Files\ProfileUnity\Client.NET\LwL.ProfileUnity.Client.UserInit.exe0
C:\Program Files\Profileunity\Client.Net\lzop.exe0
C:\Program Files\Profileunity\Client.Net\RsyncTools\curl.exe0
C:\Program Files\Profileunity\Client.Net\RsyncTools\rsync.exe0
C:\Program Files\Profileunity\Client.Net\x64\7z.exe0
C:\Program Files\Profileunity\Client.Net\x86\7z.exe0
C:\Program Files\ProfileUnity\Elevation\lwl_elevation_service.exe0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\drivers\fs\cbfltfs3.sys0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\drivers\fs\cbfltfs4.sys0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\msiexec_monitor.exe0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\refresh.exe0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\Sentinel\LwloSentinel.exe0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x64\VirtFsService.exe0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x86\drivers\fs\cbfltfs3.sys0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x86\drivers\fs\cbfltfs4.sys0
C:\Program Files\ProfileUnity\FlexApp\ContainerService\x86\VirtFsService.exe0
C:\Program Files\ProfileUnity\FlexApp\CTL\JitCut.exe0
C:\Program Files\ProfileUnity\FlexApp\flusher.exe0
C:\Program Files\ProfileUnity\FlexApp\JitCut.exe0
C:\Program Files\ProfileUnity\FlexApp\lw_assoc_mgr64.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_process_watcher.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_process_watcher64.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_profile_mgr.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_tray.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_player.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_player64.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_service.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_service64.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_trigger.exe0
C:\Program Files\ProfileUnity\FlexApp\lwl_userapp_trigger64.exe0
C:\Program Files\ProfileUnity\FlexApp\LwlLogonNotifier.exe0
C:\Program Files\ProfileUnity\FlexApp\msiexec_monitor.exe0
C:\Program Files\ProfileUnity\FlexApp\msiexec_monitor64.exe0
C:\Program Files\ProfileUnity\FlexApp\symlink_creator.exe0
C:\Program Files\ProfileUnity\FlexApp\symlink_creator64.exe0
C:\Program Files\ProfileUnity\FlexApp\vhd.exe0
C:\Program Files\ProfileUnity\Profile\ProfileService.exe0
C:\Program Files\ProfileUnity\Temp\Pupsync\rsync.exe0
C:\Program Files\ProfileUnity\Tools\Refresh.exe0
C:\Program Files\ProfileUnity\Tools\rsync.exe0
C:\Program Files\ProfileUnity\Tools\volutil.exe0
C:\Program Files\ProfileUnity\Tools\wkix32.exe0
C:\Program Files\ProfileUnity\userinit.exe0
C:\Windows\explorer.exe0
C:\Windows\System32\AggregatorHost.exe0
C:\Windows\System32\cmd.exe0
C:\Windows\System32\drivers\cbfilter20.sys0
C:\Windows\System32\Drivers\Cbfltfs3.sys0
C:\Windows\System32\Drivers\Cbfltfs4.sys0
C:\Windows\System32\drivers\cbfsfilter2017.sys0
C:\Windows\System32\drivers\cbfsregistry2017.sys0
C:\Windows\System32\Drivers\Cbreg.sys0
C:\Windows\System32\drivers\cbregistry20.sys0
C:\Windows\System32\svchost.exe0
C:\Windows\System32\vds.exe0
c:\windows\system32\WindowsPowerShell\v1.0\powershell.exe0
Windows Components/Windows Defender Antivirus/MAPS
PolicySettingComment
Join Microsoft MAPSEnabled
Join Microsoft MAPSDisabled
Windows Components/Windows Defender Antivirus/Real-time Protection
PolicySettingComment
Configure local setting override for monitoring file and program activity on your computerEnabled
Configure local setting override for monitoring for incoming and outgoing file activityEnabled
Configure local setting override for scanning all downloaded files and attachmentsEnabled
Configure local setting override for turn on behavior monitoringEnabled
Configure local setting override to turn on real-time protectionEnabled
Windows Components/Windows Defender Antivirus/Scan
PolicySettingComment
Check for the latest virus and spyware definitions before running a scheduled scanDisabled
Configure low CPU priority for scheduled scansEnabled
Run full scan on mapped network drivesDisabled
Scan archive filesDisabled
Scan network filesDisabled
Scan removable drivesDisabled
Specify the maximum percentage of CPU utilization during a scanEnabled
Specify the maximum percentage of CPU utilization during a scan10
PolicySettingComment
Turn on catch-up full scanDisabled
Turn on catch-up quick scanDisabled
Windows Components/Windows Defender Antivirus/Signature Updates
PolicySettingComment
Allow definition updates from Microsoft UpdateDisabled
Allow real-time definition updates based on reports to Microsoft MAPSDisabled
Check for the latest virus and spyware definitions on startupDisabled
Initiate definition update on startupDisabled
User Configuration (Enabled)
No settings defined.