ArcGPO/{1BAEEB14-8CB1-42FC-960B-55C4B45AFB0B}/gpreport.xml (300 lines of code) (raw):

��<?xml version="1.0" encoding="utf-16"?> <GPO xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://www.microsoft.com/GroupPolicy/Settings"> <Identifier> <Identifier xmlns="http://www.microsoft.com/GroupPolicy/Types">{75B32B96-3649-47A5-8886-B43904881F26}</Identifier> <Domain xmlns="http://www.microsoft.com/GroupPolicy/Types">contoso.com</Domain> </Identifier> <Name>Prueba</Name> <IncludeComments>true</IncludeComments> <CreatedTime>2021-12-15T18:12:30</CreatedTime> <ModifiedTime>2021-12-15T18:30:36</ModifiedTime> <ReadTime>2021-12-15T18:31:05.8039377Z</ReadTime> <SecurityDescriptor> <SDDL xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">O:DAG:DAD:PAI(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;S-1-5-21-3372285321-3948595762-1337603449-519)(A;CI;LCRPLORC;;;ED)(A;CI;LCRPLORC;;;AU)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;CO)S:AI(OU;CIIDSA;WPWD;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;WD)(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)</SDDL> <Owner xmlns="http://www.microsoft.com/GroupPolicy/Types/Security"> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3372285321-3948595762-1337603449-512</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">CONTOSO\Domain Admins</Name> </Owner> <Group xmlns="http://www.microsoft.com/GroupPolicy/Types/Security"> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3372285321-3948595762-1337603449-512</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">CONTOSO\Domain Admins</Name> </Group> <PermissionsPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">true</PermissionsPresent> <Permissions xmlns="http://www.microsoft.com/GroupPolicy/Types/Security"> <InheritsFromParent>false</InheritsFromParent> <TrusteePermissions> <Trustee> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3372285321-3948595762-1337603449-519</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">CONTOSO\Enterprise Admins</Name> </Trustee> <Type xsi:type="PermissionType"> <PermissionType>Allow</PermissionType> </Type> <Inherited>false</Inherited> <Applicability> <ToSelf>true</ToSelf> <ToDescendantObjects>false</ToDescendantObjects> <ToDescendantContainers>true</ToDescendantContainers> <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly> </Applicability> <Standard> <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum> </Standard> <AccessMask>0</AccessMask> </TrusteePermissions> <TrusteePermissions> <Trustee> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-9</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</Name> </Trustee> <Type xsi:type="PermissionType"> <PermissionType>Allow</PermissionType> </Type> <Inherited>false</Inherited> <Applicability> <ToSelf>true</ToSelf> <ToDescendantObjects>false</ToDescendantObjects> <ToDescendantContainers>true</ToDescendantContainers> <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly> </Applicability> <Standard> <GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum> </Standard> <AccessMask>0</AccessMask> </TrusteePermissions> <TrusteePermissions> <Trustee> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-18</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\SYSTEM</Name> </Trustee> <Type xsi:type="PermissionType"> <PermissionType>Allow</PermissionType> </Type> <Inherited>false</Inherited> <Applicability> <ToSelf>true</ToSelf> <ToDescendantObjects>false</ToDescendantObjects> <ToDescendantContainers>true</ToDescendantContainers> <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly> </Applicability> <Standard> <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum> </Standard> <AccessMask>0</AccessMask> </TrusteePermissions> <TrusteePermissions> <Trustee> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-3372285321-3948595762-1337603449-512</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">CONTOSO\Domain Admins</Name> </Trustee> <Type xsi:type="PermissionType"> <PermissionType>Allow</PermissionType> </Type> <Inherited>false</Inherited> <Applicability> <ToSelf>true</ToSelf> <ToDescendantObjects>false</ToDescendantObjects> <ToDescendantContainers>true</ToDescendantContainers> <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly> </Applicability> <Standard> <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum> </Standard> <AccessMask>0</AccessMask> </TrusteePermissions> <TrusteePermissions> <Trustee> <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-11</SID> <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\Authenticated Users</Name> </Trustee> <Type xsi:type="PermissionType"> <PermissionType>Allow</PermissionType> </Type> <Inherited>false</Inherited> <Applicability> <ToSelf>true</ToSelf> <ToDescendantObjects>false</ToDescendantObjects> <ToDescendantContainers>true</ToDescendantContainers> <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly> </Applicability> <Standard> <GPOGroupedAccessEnum>Apply Group Policy</GPOGroupedAccessEnum> </Standard> <AccessMask>0</AccessMask> </TrusteePermissions> </Permissions> <AuditingPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">false</AuditingPresent> </SecurityDescriptor> <FilterDataAvailable>true</FilterDataAvailable> <Computer> <VersionDirectory>17</VersionDirectory> <VersionSysvol>17</VersionSysvol> <Enabled>true</Enabled> <ExtensionData> <Extension xmlns:q1="http://www.microsoft.com/GroupPolicy/Settings/Security" xsi:type="q1:SecuritySettings"> <q1:Blocked>false</q1:Blocked> </Extension> <Name>Security</Name> </ExtensionData> <ExtensionData> <Extension xmlns:q2="http://www.microsoft.com/GroupPolicy/Settings/ScheduledTasks" xsi:type="q2:ScheduledTasksSettings"> <q2:ScheduledTasks clsid="{CC63F200-7309-4ba0-B154-A71CD118DBCC}"> <q2:TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" name="Arc Agent Installation" image="3" changed="2021-12-15 18:29:37" uid="{9684945C-60A9-4503-ADD4-C508F2791FBF}" userContext="0" removePolicy="0"> <q2:GPOSettingOrder>1</q2:GPOSettingOrder> <q2:Properties action="D" name="Arc Agent Installation" runAs="NT AUTHORITY\System" logonType="S4U"> <q2:Task version="1.3"> <q2:RegistrationInfo> <q2:Author>CONTOSO\administrator</q2:Author> <q2:Description /> </q2:RegistrationInfo> <q2:Triggers /> <q2:Settings> <q2:AllowStartOnDemand>false</q2:AllowStartOnDemand> <q2:DisallowStartIfOnBatteries>false</q2:DisallowStartIfOnBatteries> <q2:StopIfGoingOnBatteries>false</q2:StopIfGoingOnBatteries> <q2:AllowHardTerminate>true</q2:AllowHardTerminate> <q2:Enabled>true</q2:Enabled> <q2:Hidden>false</q2:Hidden> <q2:MultipleInstancesPolicy>IgnoreNew</q2:MultipleInstancesPolicy> <q2:Priority>7</q2:Priority> <q2:ExecutionTimeLimit>P3D</q2:ExecutionTimeLimit> <q2:IdleSettings> <q2:Duration>PT5M</q2:Duration> <q2:WaitTimeout>PT1H</q2:WaitTimeout> <q2:StopOnIdleEnd>false</q2:StopOnIdleEnd> <q2:RestartOnIdle>false</q2:RestartOnIdle> </q2:IdleSettings> </q2:Settings> <q2:Principals> <q2:Principal id="Author"> <q2:UserId>NT AUTHORITY\System</q2:UserId> <q2:LogonType>S4U</q2:LogonType> <q2:RunLevel>HighestAvailable</q2:RunLevel> </q2:Principal> </q2:Principals> <q2:Actions> <q2:Exec> <q2:Command>PowerShell.exe</q2:Command> </q2:Exec> </q2:Actions> </q2:Task> </q2:Properties> <q2:Filters> <q2:FilterOs bool="AND" not="0" class="NT" version="2K8R2" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WIN8S" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WINBLUESRV" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WINTHRESHOLDSRV" type="NE" edition="NE" sp="NE" /> </q2:Filters> </q2:TaskV2> <q2:ImmediateTaskV2 clsid="{9756B581-76EC-4169-9AFC-0CA8D43ADB5F}" name="Arc Agent Installation" image="0" changed="2021-12-15 18:30:36" uid="{1A3FC9E2-F3D5-442D-B6AD-5CDC09D2594F}" userContext="0" removePolicy="0"> <q2:GPOSettingOrder>2</q2:GPOSettingOrder> <q2:Properties action="C" name="Arc Agent Installation" runAs="NT AUTHORITY\System" logonType="S4U"> <q2:Task version="1.3"> <q2:RegistrationInfo> <q2:Author>AD\admin</q2:Author> <q2:Description /> </q2:RegistrationInfo> <q2:Triggers> <q2:TimeTrigger> <q2:Enabled>true</q2:Enabled> <q2:StartBoundary>%LocalTimeXmlEx%</q2:StartBoundary> <q2:EndBoundary>%LocalTimeXmlEx%</q2:EndBoundary> </q2:TimeTrigger> </q2:Triggers> <q2:Settings> <q2:AllowStartOnDemand>true</q2:AllowStartOnDemand> <q2:DisallowStartIfOnBatteries>true</q2:DisallowStartIfOnBatteries> <q2:StopIfGoingOnBatteries>true</q2:StopIfGoingOnBatteries> <q2:AllowHardTerminate>true</q2:AllowHardTerminate> <q2:StartWhenAvailable>true</q2:StartWhenAvailable> <q2:Enabled>true</q2:Enabled> <q2:Hidden>false</q2:Hidden> <q2:DeleteExpiredTaskAfter>PT0S</q2:DeleteExpiredTaskAfter> <q2:MultipleInstancesPolicy>IgnoreNew</q2:MultipleInstancesPolicy> <q2:Priority>7</q2:Priority> <q2:ExecutionTimeLimit>P3D</q2:ExecutionTimeLimit> <q2:IdleSettings> <q2:Duration>PT10M</q2:Duration> <q2:WaitTimeout>PT1H</q2:WaitTimeout> <q2:StopOnIdleEnd>true</q2:StopOnIdleEnd> <q2:RestartOnIdle>false</q2:RestartOnIdle> </q2:IdleSettings> </q2:Settings> <q2:Principals> <q2:Principal id="Author"> <q2:UserId>NT AUTHORITY\System</q2:UserId> <q2:LogonType>S4U</q2:LogonType> <q2:RunLevel>HighestAvailable</q2:RunLevel> </q2:Principal> </q2:Principals> <q2:Actions> <q2:Exec> <q2:Command>PowerShell.exe</q2:Command> <q2:Arguments>-ExecutionPolicy Bypass -Command "Copy-Item \\contoso.com\NETLOGON\{NetlogonSubfolder}\EnableAzureArc.ps1 $ENV:TEMP -Force; &amp; $ENV:TEMP\EnableAzureArc.ps1 -NetlogonSubfolder {NetlogonSubfolder}"</q2:Arguments> </q2:Exec> <q2:Exec> <q2:Command>PowerShell.exe</q2:Command> <q2:Arguments>-ExecutionPolicy Bypass -Command "Remove-Item $ENV:TEMP\EnableAzureArc.ps1 -Force -ErrorAction SilentlyContinue"</q2:Arguments> </q2:Exec> </q2:Actions> </q2:Task> </q2:Properties> <q2:Filters> <q2:FilterCollection bool="AND" not="0"> <q2:FilterOs bool="AND" not="0" class="NT" version="2K8R2" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WIN8S" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WINBLUESRV" type="NE" edition="NE" sp="NE" /> <q2:FilterOs bool="OR" not="0" class="NT" version="WINTHRESHOLDSRV" type="NE" edition="NE" sp="NE" /> </q2:FilterCollection> <q2:FilterRegistry bool="AND" not="0" type="VALUEEXISTS" hive="HKEY_LOCAL_MACHINE" key="SOFTWARE\MICROSOFT\AzureArc" valueName="RegistrationInfo" valueType="REG_SZ" valueData="" min="0.0.0.0" max="0.0.0.0" gte="1" lte="0" /> <q2:FilterRegistry bool="AND" not="0" type="VALUEEXISTS" hive="HKEY_LOCAL_MACHINE" key="SOFTWARE\MICROSOFT\AzureArc" valueName="Registrationkey" valueType="REG_SZ" valueData="" min="0.0.0.0" max="0.0.0.0" gte="1" lte="0" /> </q2:Filters> </q2:ImmediateTaskV2> </q2:ScheduledTasks> </Extension> <Name>Scheduled Tasks</Name> </ExtensionData> <ExtensionData> <Extension xmlns:q3="http://www.microsoft.com/GroupPolicy/Settings/Windows/Registry" xsi:type="q3:RegistrySettings"> <q3:RegistrySettings clsid="{A3CCFC41-DFDB-43a5-8D26-0FE8B954DA51}"> <q3:Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="RegistrationInfo" status="RegistrationInfo" image="7" changed="2021-12-15 18:08:23" uid="{8B9EDD0D-10BD-4802-9436-B8B8B9A4F804}" bypassErrors="1"> <q3:GPOSettingOrder>1</q3:GPOSettingOrder> <q3:Properties action="U" displayDecimal="1" default="0" hive="HKEY_LOCAL_MACHINE" key="SOFTWARE\MICROSOFT\AzureArc" name="RegistrationInfo" type="REG_SZ" value="RegistrationInfoTOSET"> <q3:Values /> </q3:Properties> <q3:Filters> <q3:FilterOs bool="AND" not="0" class="NT" version="2K8R2" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WIN8S" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WINBLUESRV" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WINTHRESHOLDSRV" type="NE" edition="NE" sp="NE" /> </q3:Filters> </q3:Registry> <q3:Registry clsid="{9CD4B2F4-923D-47f5-A062-E897DD1DAD50}" name="RegistrationKey" status="RegistrationKey" image="7" changed="2021-12-15 18:10:30" uid="{E7C5BE53-F83B-4BA8-8D6C-744A50DA8206}" bypassErrors="1"> <q3:GPOSettingOrder>2</q3:GPOSettingOrder> <q3:Properties action="U" displayDecimal="1" default="0" hive="HKEY_LOCAL_MACHINE" key="SOFTWARE\MICROSOFT\AzureArc" name="RegistrationKey" type="REG_SZ" value="RegistrationKeyTOSET"> <q3:Values /> </q3:Properties> <q3:Filters> <q3:FilterOs bool="AND" not="0" class="NT" version="2K8R2" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WIN8S" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WINBLUESRV" type="NE" edition="NE" sp="NE" /> <q3:FilterOs bool="OR" not="0" class="NT" version="WINTHRESHOLDSRV" type="NE" edition="NE" sp="NE" /> </q3:Filters> </q3:Registry> </q3:RegistrySettings> </Extension> <Name>Windows Registry</Name> </ExtensionData> <ExtensionData> <Extension xmlns:q4="http://www.microsoft.com/GroupPolicy/Settings/Registry" xsi:type="q4:RegistrySettings"> <q4:Blocked>false</q4:Blocked> </Extension> <Name>Registry</Name> </ExtensionData> </Computer> <User> <VersionDirectory>1</VersionDirectory> <VersionSysvol>1</VersionSysvol> <Enabled>true</Enabled> </User> </GPO>