Group Policies not saving. Win 10 v2004

dracarys · 02 Oct 2020

Hello,

So I'm trying to disable anti virus, especially realtime protection, but every time I reboot, gpedit settings revert back to normal. Never had this issue before.

I read some guy solved it by this method:

did some digging and googling and found what caused it at least in my case. It was FSRM role that we installed it to prevent ransomware change files extensions.
I removed file screens and rebooted server and it fixed GPO immediately. It's a bug in 2019 server family, MS is aware. It has something to do with sysvol if you put file screen on the C drive.
Anyway, hope this will help.

Not sure how to go about that, or if there's another simpler fix.

Thanks!

dalchina · 02 Oct 2020

Please assist people responding by clarifying this. Thanks.

So I'm trying to disable anti virus

So.. suggests there is something preceding that led to this as a consequence. I.e. what caused you to seek to disable AV protection?

Which AV? Windows Defender? 3rd party AV? Essential information.

Do you mean you are
a. trying to disable AV protection using group policy?
b. trying to disable AV protection because you think it stops group policy settings being applied?

Which edition of Windows do you actually have? Home/Pro/ something else?

The forum prompted you (so we don't have to keep on typing the question) to specify your full Windows build number e.g. 19014.508.

Your build no. is.........

sygnus21 · 02 Oct 2020

With each new build things change. Anyway - Stay protected with Windows Security (scroll down to "Turn Microsoft Defender Antivirus real-time protection on or off")

BTW, I've found that re-booting will turn Real Time protection back on. I'm running Windows 10 2004, build below my avatar.

As for how to employ the fix you posted, you might ask the person who posted said fix.

Good luck.

dracarys · 02 Oct 2020

I turn it off for audio production, it causes all sorts of issues.

Trying to disable Microsoft AV protection using group policy.

Windows 10 Pro 2004 19041.508

dalchina said:

Please assist people responding by clarifying this. Thanks.

So.. suggests there is something preceding that led to this as a consequence. I.e. what caused you to seek to disable AV protection?

Which AV? Windows Defender? 3rd party AV? Essential information.

Do you mean you are
a. trying to disable AV protection using group policy?
b. trying to disable AV protection because you think it stops group policy settings being applied?

Which edition of Windows do you actually have? Home/Pro/ something else?

The forum prompted you (so we don't have to keep on typing the question) to specify your full Windows build number e.g. 19014.508.

You build no. is.........

dalchina · 02 Oct 2020

Thank you for your reply.

I don't know if these will help you more than what you may have tried:

Turn On or Off Real-time Protection for Microsoft Defender Antivirus
How to Turn On or Off Microsoft Defender Antivirus in Windows 10
Turn On or Off Tamper Protection for Microsoft Defender Antivirus

dracarys · 02 Oct 2020

dalchina said:

Thank you for your reply.

I don't know if these will help you more than what you may have tried:

Turn On or Off Real-time Protection for Microsoft Defender Antivirus
How to Turn On or Off Microsoft Defender Antivirus in Windows 10
Turn On or Off Tamper Protection for Microsoft Defender Antivirus

None of these options worked, nothing is saving. Registry deletes "DisableRealtimeMonitoring" after reboot, as well as "DisableAntiSpyware".

Also, powershell doesn't grant access/permissions.

However, registry still says "DisableRoutinelyTakingAction" under Windows Defender. But nothing is saved in GP edit. Also tried changing folder permissions in Registry, and manually giving DisableAntiSpyware, AntiVirus, etc, a value of 1. Just give me an error

dalchina · 02 Oct 2020

Again, thank you for your reply.

Please run some basic checks as I know nothing of the history of the PC, or how you reached this state:
Check your disk: download, install and run
Crystal Diskinfo

If ok, run
chkdsk c: /scan from an admin command or Powershell prompt
If ok, similarly run
SFC /SCANNOW
and post the summary result (pass/fail).

If all pass, then consider using the permissions repairs offered by Tweaking.com's free repair tool (Google it).
Before you do so, I strongly recommend you create a current disk image- e.g. Macrium Reflect (free) so you have away back, just in case. (Hopefully you are already using disk imaging routinely).

The repair tool has several guided preparatory steps. Please follow those.

Then select only the permissions repairs. These include file system and registry permissions.

If all goes well, try again.

dracarys · 02 Oct 2020

Did all of that, no scan issues. Did a repair in safe mode with the presets, even the in depth permissions checkbox's. Still can't adjust anything including registry values. Is this a windows version 2004 thing? My 1909 desktop is fine

dalchina · 02 Oct 2020

How do you know the registry isn't being changed?
If you use the registry editor, can you change anything?

Please try that- something innocuous, create screenshot, restart, screenshot of same thing in registry.

Did this problem only start after you upgraded to 2004?
Are you logged in as admin?
Is UAC enabled?

dracarys · 02 Oct 2020

dalchina said:

How do you know the registry isn't being changed?
If you use the registry editor, can you change anything?

Please try that- something innocuous, create screenshot, restart, screenshot of same thing in registry.

Did this problem only start after you upgraded to 2004?
Are you logged in as admin?
Is UAC enabled?

I can't change things in Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender

But that shouldn't matter, on my desktop version 1909, the value of all these things are zero. I was easily able to edit GPO, then when I goto virus settings on my 1909 desktop, everything is permanently shut off, can't even turn Real time protection or other features on, the sliders don't work.

Yes I upgraded to 2004, but I literally just reformatted, now when I edit GPO the settings stay and don't reset on reboot, but nothing is effective still?

UAC is off, pretty sure that doesn't matter with GPO. I guess I will try a 1909 version

- - - Updated - - -

Just installed the same 1909 on my laptop, same method from flash drive, still can't F'ing edit GP. Now it's even worse, it doesn't save as soon as I close the tab unless I type in a comment lmao, not just after reboot. Is it my laptop? Bios?

I'm done lol