Windows 10: Bug report: GPO has same effect whether disabled or enabled

GPO:
Computer Configuration\Administrative Templates\Windows Components\Windows update\Remove access to use all Windows update features

When Enabled, it creates a registry value:

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\DisableWindowsUpdateAccess = 1


When Disabled, it creates a registry value:

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\DisableWindowsUpdateAccess = 0


When Not Configured, it deletes the registry value:

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\DisableWindowsUpdateAccess = (deleted)


EXPECTED BEHAVIOR:

When this GPO is "Disabled" and the registry value is "0", we expect the GPO's behavior to NOT be applied. So when Disabled, users should NOT have their Windows Update access removed. This is useful for ensuring that other GPOs up the tree that might be set to Enabled will be overridden by this Disabled GPO.


ACTUAL BEHAVIOR:

When this GPO is set to "Disabled" and the registry value is "0", the behavior still applies and removes access from the users. The "Check For Updates" and "Install Now" buttons are greyed out. I'm using fully updated Server 2016, the latest ADMX files, and fully updated Windows 10 1803.


WORKAROUND:

To fix the issue, I have to change the GPO to "Not Configured", which is an ugly workaround because "Not Configured" is supposed to mean that we are not enforcing any preference, so some computers may have this enabled and other computers may not.


REQUESTED SOLUTION FROM MICROSOFT:

Change Windows to interpret a "0" value in that registry value to be the same as if the value did not exist at all. The only time the registry value should have an effect is if the value is set to "1". (This should be the same behavior for ALL registry values and GPOs, imo)

:)

 

Windows Security Screen shutdown/restart with GPO

Running Win 10 Pro as admin and using GPO for standard users to limit shutdown/restart/hibernate option. GPO restriction works everywhere it should but on Windows Security screen where Power Button is still functional. Could this be a bug? Am an experienced
GPO user. Have already done SFC and dism as well as Disabled/Not Configured and re Enabled GPO option. Any suggestions? Appreciate any help. Thank you.

 

GPO to enable UAC and set to Level 3

First... I am on a domain which is moot. GOP is GPO. If I go in and disable the Windows Firewall via GPO then even as a local administrator, when I go in to Control Panel and Windows Firewall, I cannot turn it back on. It is grey-ed out. That is what a GPO
is for. To make settings no one can change. Try it.

As a administrator I can change the GPO to re-enable the Windows Firewall but I can no longer go in to Control Panel and change it because the GPO is controlling it.

 

BitLocker refuses to enable

SarahKong: Inserting a flash drive would help if I could at least get past the error that the GPO isn't set. Step 1 (Enable BitLocker) in the article you specified is where my issue lies ... I can't even turn on BitLocker. Step 3 is where the flash drive
would come into play, but I can't get past step 1.

Andrea Da Costa: We don't set these GPOs in our domain, and I've tried gpupdate /force and a reboot to no effect.