GPOs to Disable Account Settings are not working


  1. Posts : 3
    Windows 10 Pro
       #1

    GPOs to Disable Account Settings are not working


    Hello,

    I need to disable the below settings. I have tried using the below GPO settings, ran gpupdate /force and restarted 2 domain computers. I then logged into each computer with a different domain account. The live tiles were still changing. I am still able to add a PIN to the account. I was still able to add a Microsoft account. (I do not have a Work/School account but the option was still available. I added the same Microsoft account to both domain users. The Sync your settings is all grayed out and all set to off. However, I noticed the desktop background synced and the Favorites Synced. How do I disable all these settings so they cannot be used and are turned off?

    Disable Live Tiles
    Disable Settings - Accounts - Sing-in Options - Create a PIN
    Disable Settings - Accounts - Your account - Add Microsoft account
    Disable Settings - Accounts - Your account - Add a work or school account
    Disable Settings - Accounts - Sync your Settings


    Disable Live Tiles
    GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar
    Clear history of Tile notification on exit Setting: Enabled

    GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar/Notifications
    Turn off notifications network usage Setting: Enabled
    Turn off tile notifications Setting: Enabled

    Disable Settings - Accounts - Sing-in Options - Create a PIN
    GPO - Computer Configuration/Policies/Administrative Templates/System/Logon
    Turn on PIN sign-in Setting: Disabled

    Disable Settings - Accounts - Your account - Add Microsoft account
    GPO - Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
    Accounts: Block Micorosoft Accounts Setting: User's can't add or log on with Microsoft Accounts

    GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/App runtime
    Allow Microsoft accounts to be optional Setting: Enabled

    Disable Settings - Accounts - Your account - Add a work or school account
    GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Microsoft Passport for Work
    Use Microsoft Passport for Work Setting: Disabled

    Disable Settings - Accounts - Sync your Settings
    GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Sync your settings
    Don not sync Setting: Enabled

    Thanks for the help,

    Eric
      My Computer


  2. Posts : 76
    Win 10 Pro x64
       #2

    Where did you find a GPO template for Windows 10?


    Where did you find a GPO template for Windows 10?
      My Computer


  3. Posts : 3
    Windows 10 Pro
    Thread Starter
       #3

    mfaklis said:
    Where did you find a GPO template for Windows 10?
    Download Administrative Templates (.admx) for Windows 10 from Official Microsoft Download Center
      My Computer


  4. Posts : 5,443
    Windows 11 Home
       #4

    I find templates uneasy to use, would not you be more comfortable with direct GPO commands like:

    reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoTileApplicationNotification" /t REG_DWORD /d "1" /f
      My Computer


  5. Posts : 3
    Windows 10 Pro
    Thread Starter
       #5

    TairikuOkami said:
    I find templates uneasy to use, would not you be more comfortable with direct GPO commands like:

    reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoTileApplicationNotification" /t REG_DWORD /d "1" /f
    A GPO does set registry settings. I verified the GPOs are applied by checking the registry entries. The problem is the reg entries are not disabling the settings.
      My Computer


  6. Posts : 76
    Win 10 Pro x64
       #6

    Could the problem be related to an incorrect WMI Filter? It appears Windows 10 WMI is formatted different than previous releases of Windows. That said, I haven't found a definitive post of how to create a working Windows 10 WMI Filter.
      My Computer


  7. Posts : 1
    DOS 6.22
       #7

    As a work around I used reg keys in GP
    Disable MS Accounts
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount]"value"=dword:00000000
    Disable PIN sign on
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions]"value"=dword:00000000
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:57.
Find Us




Windows 10 Forums