Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available

MSFT Windows 11 22H2 - BitLocker
Data collected on: 9/19/2022 8:29:13 AM |

General
Details

Domain | security.local
Owner | SECURITY\Domain Admins
Created | 12/12/2019 5:55:26 AM
Modified | 8/22/2022 6:15:54 AM
User Revisions | 1 (AD), 1 (SYSVOL)
Computer Revisions | 1 (AD), 1 (SYSVOL)
Unique ID | {F9CA6C42-3A57-4D81-88BF-6CD8289FD1F5}
GPO Status | User settings disabled

Links

Location | Enforced | Link Status | Path
--- | --- | --- | ---
MSFT Clients | No | Enabled | security.local/MSFT Clients
SCT Windows 11 Client | No | Enabled | security.local/SCT Windows 11 Client

This list only includes links in the domain of the GPO.
Security Filtering
The settings in this GPO can only apply to the following groups, users, and computers:

Name
NT AUTHORITY\Authenticated Users

Delegation
These groups and users have the specified permission for this GPO

Name | Allowed Permissions | Inherited
--- | --- | ---
NT AUTHORITY\Authenticated Users | Read (from Security Filtering) | No
NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS | Read | No
NT AUTHORITY\SYSTEM | Edit settings, delete, modify security | No
SECURITY\Domain Admins | Edit settings, delete, modify security | No
SECURITY\Enterprise Admins | Edit settings, delete, modify security | No

Computer Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the local computer.
System/Device Installation/Device Installation Restrictions

Policy | Setting | Comment
--- | --- | ---
Prevent installation of devices using drivers that match these device setup classes | Enabled |
Prevent installation of devices using drivers for these device setup classes:
{d48179be-ec20-11d1-b6b8-00c04fa372a7}
To create a list of device classes, click Show. In the Show Contents dialog box, in the Value column,
type a GUID that represents a device setup class
(for example, {25DBCE51-6C8F-4A72-8A6D-B54C2B4FC835}).
Also apply to matching devices that are already installed. | Enabled

System/Power Management/Sleep Settings

Policy | Setting | Comment
--- | --- | ---
Allow standby states (S1-S3) when sleeping (on battery) | Disabled |
Allow standby states (S1-S3) when sleeping (plugged in) | Disabled |

Windows Components/BitLocker Drive Encryption

Policy | Setting | Comment
--- | --- | ---
Disable new DMA devices when this computer is locked | Enabled |

Windows Components/BitLocker Drive Encryption/Operating System Drives

Policy | Setting | Comment
--- | --- | ---
Allow enhanced PINs for startup | Enabled |

Windows Components/BitLocker Drive Encryption/Removable Data Drives

Policy | Setting | Comment
--- | --- | ---
Deny write access to removable drives not protected by BitLocker | Enabled |
Do not allow write access to devices configured in another organization | Disabled

User Configuration (Disabled)
No settings defined.