Windows 10: Create a GPO that disables WiFi on all joined PC's in a domain controller

Hi all,I have been testing out how to block WiFi on all Laptops that joins a domain. But I am not successful yet. This is how I am trying to achieve this:Open up the Group Policy ManagementUnder there create a new GPO and call it BlockWiFi. Right click and edit the GPOAdd the new service as following:Meaning of this rule is to shutdown the driver that handles the WiFi in overall. Here we specify that if such service do exists then simply stop the service.However if you look closely on screenshot from part 3 I have noted that the rule is actually set on the Domain controller? Is my assumption c

:)

 

Can I create GPO template for a non domain setup?

This might be what you're looking for AdminThing.blogspot.com: Apply GPO settings on non domain computers : Step by Step

 

After implementing KB5020276 March,16 I'm still not able to re-join the PC to the domain

Hello,

I've proceeded step by step with all instructions regarding KB5020276:

1. Install March,16 updates on all Domain Controller
   
2. Install March,16 updates on the test workstation
   
3. Set up new GPO setting as per documentation - settings taken by all DCs
   
4. Ensured that NetJoinLegacyAccountReuse was not set in the registry
   

But still, I'm getting the error that accounts re-use is blocked by the security policy

I've also checked NetSetup.log file and the output is quite strange:

IsLegacyAccountReuseSetInRegistry: RegQueryValueEx for 'NetJoinLegacyAccountReuse' returned Status: 0x2.

IsLegacyAccountReuseSetInRegistry returning: 'FALSE''.

NetpDsValidateComputerReuseAttempt: returning NtStatus: 0, NetStatus: 0

NetpDsValidateComputerReuseAttempt: fReuseAllowed: FALSE, NetStatus 0x0

NetpModifyComputerObjectInDs: Account exists and re-use is blocked by policy. Error: 0xaac

I've tested the behavior in 3 cases:

1. Use a non-admin account with delegated permissions to join the PC and modify computer objects in AD assigned directly in GPO as a Trusted Computer Account Owner
   
2. User non-admin account which is a member of the group which is added as Trusted Computer Account Owner in GPO
   
3. Domain Admin Member
   

In all 3 cases, I'm getting the error that the account cannot be re-used

After all, I've checked the alternative path - with NetJoinLegacyAccountReuse - only with this field set to 1 in the registry was I able to perform domain re-join using delegated account and Domain Admin account

Do you know what can be missing or wrongly configured in the KB5020276 March,16 implementations? I've checked everything several times and I fail every time.

 

Join Windows 10 PC to a Domain  


@rseiler,

I just finished clean installing Windows 10 Enterprise build 17093 in a VM using a local account, and it still has the same steps in the tutorial for me.

Is your PC already joined to a domain?