noid-privacy/Modules/SecurityBaseline/ParsedSettings/Computer-RegistryPolicies.json

2313 lines
82 KiB
JSON

[
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\FVE",
"ValueName": "UseEnhancedPin",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\FVE",
"ValueName": "RDVDenyCrossOrg",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\FVE",
"ValueName": "DisableExternalDMAUnderLock",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Power\\PowerSettings\\abfc2519-3608-4c2a-94ea-171b0ed546ab",
"ValueName": "DCSettingIndex",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Power\\PowerSettings\\abfc2519-3608-4c2a-94ea-171b0ed546ab",
"ValueName": "ACSettingIndex",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceInstall\\Restrictions",
"ValueName": "DenyDeviceClasses",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceInstall\\Restrictions",
"ValueName": "DenyDeviceClassesRetroactive",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceInstall\\Restrictions\\DenyDeviceClasses",
"ValueName": "**delvals.",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceInstall\\Restrictions\\DenyDeviceClasses",
"ValueName": "1",
"Type": "REG_SZ",
"Data": "{d48179be-ec20-11d1-b6b8-00c04fa372a7}"
},
{
"GPO": "MSFT Windows 11 25H2 - BitLocker",
"KeyName": "[System\\CurrentControlSet\\Policies\\Microsoft\\FVE",
"ValueName": "RDVDenyWriteAccess",
"Type": "REG_DWORD",
"Data": 0,
"Comment": "HOME USER DEFAULT: Allow USB write access. Enterprise users: Change to 1 for encryption enforcement with prompt. User can still manually encrypt via right-click → Turn on BitLocker."
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender",
"ValueName": "PUAProtection",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender",
"ValueName": "DisableLocalAdminMerge",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender",
"ValueName": "HideExclusionsFromLocalAdmins",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender",
"ValueName": "DisableRoutinelyTakingAction",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Features",
"ValueName": "PassiveRemediation",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\MpEngine",
"ValueName": "MpCloudBlockLevel",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\MpEngine",
"ValueName": "MpBafsExtendedTimeout",
"Type": "REG_DWORD",
"Data": 50
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\NIS",
"ValueName": "EnableConvertWarnToBlock",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableIOAVProtection",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableRealtimeMonitoring",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableScriptScanning",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableBehaviorMonitoring",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "RealtimeScanDirection",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableOnAccessProtection",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "DisableScanOnRealtimeEnable",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Real-Time Protection",
"ValueName": "OobeEnableRtpAndSigUpdate",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Reporting",
"ValueName": "EnableDynamicSignatureDroppedEventReporting",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Scan",
"ValueName": "DisableRemovableDriveScanning",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Scan",
"ValueName": "QuickScanIncludeExclusions",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Spynet",
"ValueName": "SpynetReporting",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Spynet",
"ValueName": "DisableBlockAtFirstSeen",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Spynet",
"ValueName": "SubmitSamplesConsent",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR",
"ValueName": "ExploitGuard_ASR_Rules",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "3b576869-a4ec-4529-8536-b80a7769e899",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "d4f940ab-401b-4efc-aadc-ad5f3c50688a",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "92E97FA1-2EDF-4476-BDD6-9DD0B4DDDC7B",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "5beb7efe-fd9a-4556-801d-275e5ffc04cc",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "d3e037e1-3eb8-44c8-a917-57927947596d",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "be9ba2d9-53ea-4cdc-84e5-9b1eeee46550",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "9e6c4e1f-7d60-472f-ba1a-a39ef669e4b2",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "b2b3f03d-6a65-4f7b-a9c7-1c7ef74a9ba4",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "26190899-1602-49e8-8b27-eb1d0a1ce869",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "7674ba52-37eb-4a4f-a9a1-f0f9a1619a2c",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "c1db55ab-c21a-4637-bb3f-a12568109d35",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "e6db77e5-3df2-4cf1-b95a-636979351e5b",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "56a863a9-875e-4185-98a7-b882c64b5ce5",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\ASR\\Rules",
"ValueName": "d1e49aac-8f56-4280-b9ba-993a6d77406c",
"Type": "REG_SZ",
"Data": "2"
},
{
"GPO": "MSFT Windows 11 25H2 - Defender Antivirus",
"KeyName": "[Software\\Policies\\Microsoft\\Windows Defender\\Windows Defender Exploit Guard\\Network Protection",
"ValueName": "EnableNetworkProtection",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Ext",
"ValueName": "RunThisTimeEnabled",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Ext",
"ValueName": "VersionCheckEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Download",
"ValueName": "RunInvalidSignatures",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Download",
"ValueName": "CheckExeSignatures",
"Type": "REG_SZ",
"Data": "yes"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main",
"ValueName": "Isolation64Bit",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main",
"ValueName": "DisableEPMCompat",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main",
"ValueName": "Isolation",
"Type": "REG_SZ",
"Data": "PMEM"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main",
"ValueName": "DisableInternetExplorerLaunchViaCOM",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_DISABLE_MK_PROTOCOL",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_HANDLING",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_MIME_SNIFFING",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_ACTIVEXINSTALL",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_ACTIVEXINSTALL",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_ACTIVEXINSTALL",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_FILEDOWNLOAD",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_FILEDOWNLOAD",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_RESTRICT_FILEDOWNLOAD",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SECURITYBAND",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SECURITYBAND",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_SECURITYBAND",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_WINDOW_RESTRICTIONS",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION",
"ValueName": "(Reserved)",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION",
"ValueName": "explorer.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Main\\FeatureControl\\FEATURE_ZONE_ELEVATION",
"ValueName": "iexplore.exe",
"Type": "REG_SZ",
"Data": "1"
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\PhishingFilter",
"ValueName": "PreventOverrideAppRepUnknown",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\PhishingFilter",
"ValueName": "PreventOverride",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\PhishingFilter",
"ValueName": "EnabledV9",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Restrictions",
"ValueName": "NoCrashDetection",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Security",
"ValueName": "DisableSecuritySettingsCheck",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Security\\ActiveX",
"ValueName": "BlockNonAdminActiveXInstall",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\AxInstaller",
"ValueName": "OnlyUseAXISForActiveXInstall",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "Security_zones_map_edit",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "Security_options_edit",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "Security_HKLM_only",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "CertificateRevocation",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "PreventIgnoreCertErrors",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "WarnOnBadCertRecving",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "EnableSSL3Fallback",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings",
"ValueName": "SecureProtocols",
"Type": "REG_DWORD",
"Data": 2560
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\0",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\1",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\2",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\3",
"ValueName": "2301",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\4",
"ValueName": "2301",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Lockdown_Zones\\4",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap",
"ValueName": "UNCAsIntranet",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\0",
"ValueName": "270C",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1",
"ValueName": "270C",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1",
"ValueName": "1201",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\1",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 65536
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 65536
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2",
"ValueName": "270C",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\2",
"ValueName": "1201",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2001",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2102",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1802",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "160A",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1201",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1406",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1804",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2200",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1209",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1206",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1809",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2500",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2103",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1606",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2402",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2004",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1001",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1A00",
"Type": "REG_DWORD",
"Data": 65536
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2708",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1004",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "120b",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1407",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1409",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "270C",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1607",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2709",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2101",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "2301",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "1806",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "120c",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\3",
"ValueName": "140C",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1608",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1201",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1001",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1607",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "120b",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1809",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1004",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1606",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1407",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "160A",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1406",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2102",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2004",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2200",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2000",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1402",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1803",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2402",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1400",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1A00",
"Type": "REG_DWORD",
"Data": 196608
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2001",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2500",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1409",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1C00",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1209",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "270C",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1206",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2708",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1802",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2103",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2709",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1405",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2101",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "2301",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1200",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1804",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "1806",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "120c",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Internet Explorer 11 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Zones\\4",
"ValueName": "140C",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\WcmSvc\\wifinetworkmanager\\config",
"ValueName": "AutoConnectAllowedOEM",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\CredUI",
"ValueName": "EnumerateAdministrators",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"ValueName": "NoDriveTypeAutoRun",
"Type": "REG_DWORD",
"Data": 255
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"ValueName": "NoWebServices",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer",
"ValueName": "NoAutorun",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\LAPS",
"ValueName": "BackupDirectory",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\LAPS",
"ValueName": "ADPasswordEncryptionEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\LAPS",
"ValueName": "ADBackupDSRMPassword",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",
"ValueName": "MSAOptional",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",
"ValueName": "DisableAutomaticRestartSignOn",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",
"ValueName": "LocalAccountTokenFilterPolicy",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System",
"ValueName": "EnableMPR",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Audit",
"ValueName": "ProcessCreationIncludeCmdLine_Enabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\CredSSP\\Parameters",
"ValueName": "AllowEncryptionOracle",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\KDC\\Parameters",
"ValueName": "PKINITHashAlgorithmConfigurationEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\KDC\\Parameters",
"ValueName": "PKINITSHA1",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\KDC\\Parameters",
"ValueName": "PKINITSHA256",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\KDC\\Parameters",
"ValueName": "PKINITSHA384",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\KDC\\Parameters",
"ValueName": "PKINITSHA512",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters",
"ValueName": "PKInitHashAlgorithmConfigurationEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters",
"ValueName": "PKInitSHA1",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters",
"ValueName": "PKInitSHA256",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters",
"ValueName": "PKInitSHA384",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\Kerberos\\Parameters",
"ValueName": "PKInitSHA512",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Biometrics\\FacialFeatures",
"ValueName": "EnhancedAntiSpoofing",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Internet Explorer\\Feeds",
"ValueName": "DisableEnclosureDownload",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Power\\PowerSettings\\0e796bdb-100d-47d6-a2d5-f7d2daa51f51",
"ValueName": "DCSettingIndex",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Power\\PowerSettings\\0e796bdb-100d-47d6-a2d5-f7d2daa51f51",
"ValueName": "ACSettingIndex",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\AppPrivacy",
"ValueName": "LetAppsActivateWithVoiceAboveLock",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Bowser",
"ValueName": "EnableMailslots",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CloudContent",
"ValueName": "DisableWindowsConsumerFeatures",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\CredentialsDelegation",
"ValueName": "AllowProtectedCreds",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\EventLog\\Application",
"ValueName": "MaxSize",
"Type": "REG_DWORD",
"Data": 32768
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\EventLog\\Security",
"ValueName": "MaxSize",
"Type": "REG_DWORD",
"Data": 196608
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\EventLog\\System",
"ValueName": "MaxSize",
"Type": "REG_DWORD",
"Data": 32768
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Explorer",
"ValueName": "NoAutoplayfornonVolume",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Explorer",
"ValueName": "DisableMotWOnInsecurePathCopy",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\GameDVR",
"ValueName": "AllowGameDVR",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Installer",
"ValueName": "AlwaysInstallElevated",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Installer",
"ValueName": "EnableUserControl",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Kernel DMA Protection",
"ValueName": "DeviceEnumerationPolicy",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "AuditClientDoesNotSupportEncryption",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "AuditClientDoesNotSupportSigning",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "AuditInsecureGuestLogon",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "EnableAuthRateLimiter",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "MaxSmb2Dialect",
"Type": "REG_DWORD",
"Data": 785
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "MinSmb2Dialect",
"Type": "REG_DWORD",
"Data": 768
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanServer",
"ValueName": "InvalidAuthenticationDelayTimeInMs",
"Type": "REG_DWORD",
"Data": 2000
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "AllowInsecureGuestAuth",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "AuditInsecureGuestLogon",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "AuditServerDoesNotSupportEncryption",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "AuditServerDoesNotSupportSigning",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "MaxSmb2Dialect",
"Type": "REG_DWORD",
"Data": 785
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "MinSmb2Dialect",
"Type": "REG_DWORD",
"Data": 768
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\LanmanWorkstation",
"ValueName": "RequireEncryption",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Network Connections",
"ValueName": "NC_ShowSharedAccessUI",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\NetworkProvider",
"ValueName": "EnableMailslots",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\NetworkProvider\\HardenedPaths",
"ValueName": "\\\\*\\SYSVOL",
"Type": "REG_SZ",
"Data": "RequireMutualAuthentication=1,RequireIntegrity=1"
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\NetworkProvider\\HardenedPaths",
"ValueName": "\\\\*\\NETLOGON",
"Type": "REG_SZ",
"Data": "RequireMutualAuthentication=1,RequireIntegrity=1"
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Personalization",
"ValueName": "NoLockScreenCamera",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Personalization",
"ValueName": "NoLockScreenSlideshow",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging",
"ValueName": "EnableScriptBlockLogging",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging",
"ValueName": "**del.EnableScriptBlockInvocationLogging",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Sudo",
"ValueName": "Enabled",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "AllowDomainPINLogon",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "EnumerateLocalUsers",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "EnableSmartScreen",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "ShellSmartScreenLevel",
"Type": "REG_SZ",
"Data": "Block"
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "AllowCustomSSPsAPs",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\System",
"ValueName": "RunAsPPL",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WcmSvc\\GroupPolicy",
"ValueName": "fBlockNonDomain",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\Windows Search",
"ValueName": "AllowIndexingEncryptedStoresOrItems",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Client",
"ValueName": "AllowDigest",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Client",
"ValueName": "AllowUnencryptedTraffic",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Client",
"ValueName": "AllowBasic",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Service",
"ValueName": "AllowUnencryptedTraffic",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Service",
"ValueName": "DisableRunAs",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WinRM\\Service",
"ValueName": "AllowBasic",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WTDS\\Components",
"ValueName": "NotifyMalicious",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WTDS\\Components",
"ValueName": "NotifyPasswordReuse",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WTDS\\Components",
"ValueName": "NotifyUnsafeApp",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows\\WTDS\\Components",
"ValueName": "ServiceEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\DNSClient",
"ValueName": "EnableMulticast",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\DNSClient",
"ValueName": "EnableNetbios",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers",
"ValueName": "DisableWebPnPDownload",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers",
"ValueName": "RedirectionGuardPolicy",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers",
"ValueName": "CopyFilesPolicy",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\PointAndPrint",
"ValueName": "RestrictDriverInstallationToAdministrators",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\RPC",
"ValueName": "RpcUseNamedPipeProtocol",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\RPC",
"ValueName": "RpcAuthentication",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\RPC",
"ValueName": "RpcProtocols",
"Type": "REG_DWORD",
"Data": 5
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\RPC",
"ValueName": "ForceKerberosForRpc",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Printers\\RPC",
"ValueName": "RpcTcpPort",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Rpc",
"ValueName": "RestrictRemoteClients",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "**del.fUseMailto",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "fAllowToGetHelp",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "**del.fAllowFullControl",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "**del.MaxTicketExpiry",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "**del.MaxTicketExpiryUnits",
"Type": "REG_SZ",
"Data": " "
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "MinEncryptionLevel",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "fPromptForPassword",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "fDisableCdm",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "DisablePasswordSaving",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\Windows NT\\Terminal Services",
"ValueName": "fEncryptRPCTraffic",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall",
"ValueName": "PolicyVersion",
"Type": "REG_DWORD",
"Data": 538
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile",
"ValueName": "DefaultOutboundAction",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile",
"ValueName": "DisableNotifications",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile",
"ValueName": "EnableFirewall",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile",
"ValueName": "DefaultInboundAction",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile\\Logging",
"ValueName": "LogDroppedPackets",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile\\Logging",
"ValueName": "LogFileSize",
"Type": "REG_DWORD",
"Data": 16384
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\DomainProfile\\Logging",
"ValueName": "LogSuccessfulConnections",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile",
"ValueName": "EnableFirewall",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile",
"ValueName": "DisableNotifications",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile",
"ValueName": "DefaultInboundAction",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile",
"ValueName": "DefaultOutboundAction",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile\\Logging",
"ValueName": "LogSuccessfulConnections",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile\\Logging",
"ValueName": "LogDroppedPackets",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PrivateProfile\\Logging",
"ValueName": "LogFileSize",
"Type": "REG_DWORD",
"Data": 16384
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "DefaultOutboundAction",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "EnableFirewall",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "DisableNotifications",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "AllowLocalIPsecPolicyMerge",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "AllowLocalPolicyMerge",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile",
"ValueName": "DefaultInboundAction",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile\\Logging",
"ValueName": "LogFileSize",
"Type": "REG_DWORD",
"Data": 16384
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile\\Logging",
"ValueName": "LogDroppedPackets",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsFirewall\\PublicProfile\\Logging",
"ValueName": "LogSuccessfulConnections",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[Software\\Policies\\Microsoft\\WindowsInkWorkspace",
"ValueName": "AllowWindowsInkWorkspace",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Control\\Lsa",
"ValueName": "RunAsPPL",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Control\\Print",
"ValueName": "RpcAuthnLevelPrivacyEnabled",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Control\\Session Manager\\kernel",
"ValueName": "DisableExceptionChainValidation",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Policies\\EarlyLaunch",
"ValueName": "DriverLoadPolicy",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters",
"ValueName": "SMB1",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\MrxSmb10",
"ValueName": "Start",
"Type": "REG_DWORD",
"Data": 4
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\Netbt\\Parameters",
"ValueName": "NoNameReleaseOnDemand",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\Netbt\\Parameters",
"ValueName": "NodeType",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters",
"ValueName": "EnableICMPRedirect",
"Type": "REG_DWORD",
"Data": 0
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters",
"ValueName": "DisableIPSourceRouting",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Computer",
"KeyName": "[SYSTEM\\CurrentControlSet\\Services\\Tcpip6\\Parameters",
"ValueName": "DisableIPSourceRouting",
"Type": "REG_DWORD",
"Data": 2
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "EnableVirtualizationBasedSecurity",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "RequirePlatformSecurityFeatures",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "HypervisorEnforcedCodeIntegrity",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "HVCIMATRequired",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "LsaCfgFlags",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "MachineIdentityIsolation",
"Type": "REG_DWORD",
"Data": 3
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "ConfigureSystemGuardLaunch",
"Type": "REG_DWORD",
"Data": 1
},
{
"GPO": "MSFT Windows 11 25H2 - Credential Guard",
"KeyName": "[SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
"ValueName": "ConfigureKernelShadowStacksLaunch",
"Type": "REG_DWORD",
"Data": 1
}
]