Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
Group Policy Results
PEPITO\Administrator on PEPITO\WIN-ISHD8ME3USN
Data collected on: 7/10/2026 6:48:23 AM
Summary
 During last computer policy refresh on 7/10/2026 6:46:52 AM
 
No Errors Detected
A fast link was detected More information...
The following GPOs have special alerts
 
GPO NameAlert
passwordEnforced
 During last user policy refresh on 7/10/2026 6:46:52 AM
 
No Errors Detected
A fast link was detected More information...
Computer Details
General
Computer namePEPITO\WIN-ISHD8ME3USN
Domainpepito.local
SiteDefault-First-Site-Name
Organizational Unitpepito.local/Domain Controllers
Security Group Membership
show
Component Status
Component NameStatusTime TakenLast Process TimeEvent Log
Group Policy InfrastructureSuccess164 Millisecond(s)7/10/2026 6:46:52 AMView Log
RegistrySuccess15 Millisecond(s)7/10/2026 6:46:51 AMView Log
SecuritySuccess422 Millisecond(s)7/10/2026 6:46:52 AMView Log
Settings
Policies
Windows Settings
Security Settings
Account Policies/Password Policy
PolicySettingWinning GPO
Enforce password history0 passwords rememberedpassword
Maximum password age999 dayspassword
Minimum password age0 dayspassword
Minimum password length0 characterspassword
Password must meet complexity requirementsDisabledpassword
Store passwords using reversible encryptionEnabledpassword
Account Policies/Account Lockout Policy
PolicySettingWinning GPO
Account lockout threshold0 invalid logon attemptsDefault Domain Policy
Account Policies/Kerberos Policy
PolicySettingWinning GPO
Enforce user logon restrictionsEnabledDefault Domain Policy
Maximum lifetime for service ticket3000 minutespassword
Maximum lifetime for user ticket50 hourspassword
Maximum lifetime for user ticket renewal10 dayspassword
Maximum tolerance for computer clock synchronization5 minutesDefault Domain Policy
Local Policies/User Rights Assignment
PolicySettingWinning GPO
Access this computer from the networkEveryone, Administrators, Authenticated Users, ENTERPRISE DOMAIN CONTROLLERS, Pre-Windows 2000 Compatible AccessDefault Domain Controllers Policy
Add workstations to domainAuthenticated UsersDefault Domain Controllers Policy
Adjust memory quotas for a processIIS APPPOOL\DefaultAppPool, LOCAL SERVICE, NETWORK SERVICE, AdministratorsDefault Domain Controllers Policy
Allow log on locallyAdministrators, Backup Operators, Account Operators, Server Operators, Print Operators, ENTERPRISE DOMAIN CONTROLLERSDefault Domain Controllers Policy
Back up files and directoriesAdministrators, Backup Operators, Server OperatorsDefault Domain Controllers Policy
Bypass traverse checkingEveryone, LOCAL SERVICE, NETWORK SERVICE, Administrators, Authenticated Users, Pre-Windows 2000 Compatible Access, S-1-5-99-216390572-1995538116-3857911515-2404958512-2623887229Default Domain Controllers Policy
Change the system timeLOCAL SERVICE, Administrators, Server OperatorsDefault Domain Controllers Policy
Create a pagefileAdministratorsDefault Domain Controllers Policy
Debug programsAdministratorsDefault Domain Controllers Policy
Enable computer and user accounts to be trusted for delegationAdministratorsDefault Domain Controllers Policy
Force shutdown from a remote systemAdministrators, Server OperatorsDefault Domain Controllers Policy
Generate security auditsIIS APPPOOL\DefaultAppPool, LOCAL SERVICE, NETWORK SERVICE, S-1-5-99-216390572-1995538116-3857911515-2404958512-2623887229Default Domain Controllers Policy
Increase scheduling priorityAdministratorsDefault Domain Controllers Policy
Load and unload device driversAdministrators, Print OperatorsDefault Domain Controllers Policy
Log on as a batch jobAdministrators, Backup Operators, Performance Log Users, IIS_IUSRSDefault Domain Controllers Policy
Manage auditing and security logAdministratorsDefault Domain Controllers Policy
Modify firmware environment valuesAdministratorsDefault Domain Controllers Policy
Profile single processAdministratorsDefault Domain Controllers Policy
Profile system performanceAdministrators, NT SERVICE\WdiServiceHostDefault Domain Controllers Policy
Remove computer from docking stationAdministratorsDefault Domain Controllers Policy
Replace a process level tokenIIS APPPOOL\DefaultAppPool, LOCAL SERVICE, NETWORK SERVICEDefault Domain Controllers Policy
Restore files and directoriesAdministrators, Backup Operators, Server OperatorsDefault Domain Controllers Policy
Shut down the systemAdministrators, Backup Operators, Server Operators, Print OperatorsDefault Domain Controllers Policy
Take ownership of files or other objectsPEPITO\Domain Userspassword
Local Policies/Security Options
Domain Controller
PolicySettingWinning GPO
Domain controller: LDAP server signing requirementsNoneDefault Domain Controllers Policy
Domain Member
PolicySettingWinning GPO
Domain member: Digitally encrypt or sign secure channel data (always)EnabledDefault Domain Controllers Policy
Microsoft Network Server
PolicySettingWinning GPO
Microsoft network server: Digitally sign communications (always)EnabledDefault Domain Controllers Policy
Microsoft network server: Digitally sign communications (if client agrees)EnabledDefault Domain Controllers Policy
Network Access
PolicySettingWinning GPO
Network access: Allow anonymous SID/Name translationDisabledDefault Domain Policy
Network access: Do not allow anonymous enumeration of SAM accountsDisabledpassword
Network access: Do not allow anonymous enumeration of SAM accounts and sharesDisabledpassword
Network Security
PolicySettingWinning GPO
Network security: Do not store LAN Manager hash value on next password changeEnabledDefault Domain Policy
Network security: Force logoff when logon hours expireDisabledDefault Domain Policy
System Cryptography
PolicySettingWinning GPO
System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signingDisabledpassword
Event Log
PolicySettingWinning GPO
Maximum application log size64 kilobytespassword
Maximum security log size64 kilobytespassword
Retain security log1 dayspassword
Retention method for security logBy dayspassword
Public Key Policies/Certificate Services Client - Auto-Enrollment Settings
PolicySettingWinning GPO
Automatic certificate managementEnabled[Default setting]
OptionSetting
Enroll new certificates, renew expired certificates, process pending certificate requests and remove revoked certificatesDisabled
Update and manage certificates that use certificate templates from Active DirectoryDisabled
Public Key Policies/Encrypting File System
Certificates
Issued ToIssued ByExpiration DateIntended PurposesWinning GPO
AdministratorAdministrator4/1/2125 2:13:38 AMFile RecoveryDefault Domain Policy

For additional information about individual settings, launch the Local Group Policy Object Editor.
Group Policy Objects
Applied GPOs
Default Domain Controllers Policy [{6AC1786C-016F-11D2-945F-00C04fB984F9}]
Link Locationpepito.local/Domain Controllers
Extensions ConfiguredSecurity
EnforcedNo
DisabledNone
Security FiltersNT AUTHORITY\Authenticated Users
RevisionAD (3), SYSVOL (3)
WMI Filter 
Default Domain Policy [{31B2F340-016D-11D2-945F-00C04FB984F9}]
Link Locationpepito.local
Extensions Configured{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}
Security
Registry
EnforcedNo
DisabledNone
Security FiltersNT AUTHORITY\Authenticated Users
RevisionAD (5), SYSVOL (5)
WMI Filter 
password [{005A4981-DF89-4150-A038-2ABC2BE2334D}]
Link Locationpepito.local
Extensions ConfiguredSecurity
EnforcedYes
DisabledNone
Security FiltersNT AUTHORITY\Authenticated Users
RevisionAD (68), SYSVOL (68)
WMI Filter 
Denied GPOs
Local Group Policy [LocalGPO]
Link LocationLocal
Extensions Configured 
EnforcedNo
DisabledNone
Security Filters 
RevisionAD (0), SYSVOL (0)
WMI Filter 
Reason DeniedEmpty
WMI Filters
NameValueReference GPO(s)
None
User Details
General
User namePEPITO\Administrator
Domainpepito.local
Security Group Membership
show
Component Status
Component NameStatusTime TakenLast Process TimeEvent Log
Group Policy InfrastructureSuccess107 Millisecond(s)7/10/2026 6:46:52 AMView Log
Group Policy Scheduled TasksSuccess78 Millisecond(s)7/10/2026 6:46:52 AMView Log
Settings
Preferences
Control Panel Settings
Scheduled Tasks
Scheduled Task (At least Windows 7) (Name: tset)
The following settings have applied to this object. Within this category, settings nearest the top of the report are the prevailing settings when resolving conflicts.
tset
Winning GPOtest
Result: Success
General
ActionUpdate
Task
Name tset
Author PEPITO\Administrator
Description
Run only when user is logged on S4U
UserId NT AUTHORITY\System
Run with highest privileges HighestAvailable
Hidden No
Configure for 1.2
Enabled Yes
Triggers
1. Daily
Activate 5/14/2026 7:51:20 AMSynchronize across time zones No
Enabled Yes
Recur every 1 days
Actions
1. Start a program
Program/script powershell
Arguments -File 'C:\test\toto.ps1'
Settings
Stop if the computer ceases to be idle No
Restart if the idle state resumes No
Start the task only if the computer is on AC power No
Stop if the computer switches to battery power No
Allow task to be run on demand Yes
Run task as soon as possible after a scheduled start is missed Yes
If the task fails, restart every 1 minute
Attempt to restart up to 3
Stop task if it runs longer than Immediately
If the running task does not end when requested, force it to stop Yes
If the task is already running, then the following rule applies IgnoreNew
Group Policy Objects
Applied GPOs
test [{B794123C-0FB4-47F0-8B7F-B91438DAD2E1}]
Link Locationpepito.local
Extensions ConfiguredGroup Policy Scheduled Tasks
Group Policy Infrastructure
EnforcedNo
DisabledNone
Security FiltersNT AUTHORITY\Authenticated Users
RevisionAD (6), SYSVOL (6)
WMI Filter 
Denied GPOs
Local Group Policy [LocalGPO]
Link LocationLocal
Extensions Configured 
EnforcedNo
DisabledNone
Security Filters 
RevisionAD (0), SYSVOL (0)
WMI Filter 
Reason DeniedEmpty
WMI Filters
NameValueReference GPO(s)
None