Windows 10: GPOs to Disable Account Settings are not working

Hello,

I need to disable the below settings. I have tried using the below GPO settings, ran gpupdate /force and restarted 2 domain computers. I then logged into each computer with a different domain account. The live tiles were still changing. I am still able to add a PIN to the account. I was still able to add a Microsoft account. (I do not have a Work/School account but the option was still available. I added the same Microsoft account to both domain users. The Sync your settings is all grayed out and all set to off. However, I noticed the desktop background synced and the Favorites Synced. How do I disable all these settings so they cannot be used and are turned off?

Disable Live Tiles
Disable Settings - Accounts - Sing-in Options - Create a PIN
Disable Settings - Accounts - Your account - Add Microsoft account
Disable Settings - Accounts - Your account - Add a work or school account
Disable Settings - Accounts - Sync your Settings


Disable Live Tiles
GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar
Clear history of Tile notification on exit Setting: Enabled

GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar/Notifications
Turn off notifications network usage Setting: Enabled
Turn off tile notifications Setting: Enabled

Disable Settings - Accounts - Sing-in Options - Create a PIN
GPO - Computer Configuration/Policies/Administrative Templates/System/Logon
Turn on PIN sign-in Setting: Disabled

Disable Settings - Accounts - Your account - Add Microsoft account
GPO - Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
Accounts: Block Micorosoft Accounts Setting: User's can't add or log on with Microsoft Accounts

GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/App runtime
Allow Microsoft accounts to be optional Setting: Enabled

Disable Settings - Accounts - Your account - Add a work or school account
GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Microsoft Passport for Work
Use Microsoft Passport for Work Setting: Disabled

Disable Settings - Accounts - Sync your Settings
GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Sync your settings
Don not sync Setting: Enabled

Thanks for the help,

Eric

:)

 

I need to completely disable task view (left swipe function)

Yes, finally!

For some reason the GPO where you can set "AllowEdgeSwipe" to "Disabled" does NOT disable the left swipe (Task View), but adding this registry key to the same GPO worked!

Thanks.

 

Group policy "Allow cortana = disabled" not working

Using 10 pro on a domain.

Yesterday my domain admin set "allow Cortana = disabled" in GPO - my client picked it up correctly and Cortana refused to work.

This morning it's working again. The GPO hasn't changed ("Allow Cortana" is still "Disabled") and GPResult shows that setting being implemented... But Cortana's not disabled.

Any ideas?

 

Where did you find a GPO template for Windows 10?

 

Download Administrative Templates (.admx) for Windows 10 from Official Microsoft Download Center

 

I find templates uneasy to use, would not you be more comfortable with direct GPO commands like:

reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoTileApplicationNotification" /t REG_DWORD /d "1" /f

 

A GPO does set registry settings. I verified the GPOs are applied by checking the registry entries. The problem is the reg entries are not disabling the settings.

 

Could the problem be related to an incorrect WMI Filter? It appears Windows 10 WMI is formatted different than previous releases of Windows. That said, I haven't found a definitive post of how to create a working Windows 10 WMI Filter.

 

As a work around I used reg keys in GP
Disable MS Accounts
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowYourAccount]"value"=dword:00000000
Disable PIN sign on
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Settings\AllowSignInOptions]"value"=dword:00000000