Windows 10: How to Configure Local Security Policy/Group Policy for Kiosk User Without Admin Permissions?

Hi Community,I'm currently using a kiosk setup, and I don't have admin permissions. I'm trying to configure Local Security Policy or Group Policy as required for my system. However, without the necessary permissions, I'm unable to make these changes.Could anyone guide me on how to accomplish this? Are there any alternative methods or tools that can help me configure these policies without needing full administrative rights? Any assistance or suggestions would be greatly appreciated.Thank you in advance!Best regards, Moazzem Hossain

:)

 

Device Local security policy

Hello KACC5

Welcome to Microsoft Community.

Based on your current description, it appears that the Password Policy in your Local Security Policy is not editable. Typically, this happens when a system becomes a domain controller and the Local Policy is no longer valid and is replaced by the default Domain Policy.



If you continue to use the Local Policy Editor, you will find that some options are greyed out, such as this password policy, because the domain policy has a higher priority than the local group policy, even if the system is not part of a domain environment, which is often the case if the system has previously been linked to a domain environment or if there are still remnants:



If convenient, you can check some details:

1. Is your PC currently for personal use or for work/organisation use?
   
2. Also, does the current PC/Laptop licence belong to Home/Business and is your device under the network of a corporate environment, if so you should try to contact the IT administrator of the domain environment to unlock this policy for you.
   

To resolve this issue and regain control over the password policy settings, you can try the following steps (For personal use):

• Open the Command Prompt as an administrator. You can do this by right-clicking the Start menu, selecting "Command Prompt (Admin)" or "Windows PowerShell (Admin)."
  
• In the Command Prompt, type the following command and press Enter:
  
  
• This command will force a Group Policy update on your computer, which may override the existing settings and bring back control over the password policy.
  
• After the command completes, restart your computer to ensure the changes take effect.
  

If the issue persists even after performing the above steps, it's possible that there are remnants of group policy settings still active on your computer. In such cases, you may need to manually edit the registry to reset the group policy settings (For personal use). Here's a thread may tell you how:

Some of these settings are hidden or managed by your organization - Microsoft Community

Please note that the steps to reset Group Policy are only applicable to personal users, if your current device is under domain management, asking IT is still a preferred option.

Feel free to post back if anything unclear.

Best regards,



Chandy |Microsoft Community Support Specialist

 

Group Policy User Configurations not applying on Windows 10 - 1809

Having an odd issue. Upgrading a network to Windows 10 1809 from Windows 7 with brand new Group Policy Objects ready to go. I have one box already running Win10 1809 and Computer Configurations come down fine but User configurations, whether baked into
the main GPO or in a separate GPO, just do not want to apply.

Both "Authenticated Users" and "Domain Computers" are added in security filtering with Read access and no WMI filters applied. The other odd thing is that locally on the Win10 box both Event Viewer and GPResult say both Computer and User configs applied successfully
with no hint of any errors. I'm part of an Admin group on the domain and also added to the local admins.

Any thoughts on getting user configs to work? Rebooted countless times and even deleted the Group Policy folder under Regedit (HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy) and rebooted/ran gpupdate to no avail.

 

Backup/Transfer Local User Group Policy?

OS: Windows 10 Pro (version 2004)

I have been going crazy trying to figure out how to backup and transfer a user group-only policy without using a domain. I need to be able to setup a policy for non-administrators and use all the same setting configurations on dozens of computers that are not networked together or using a domain with a central policy, it has to be local-only.

So I found a program by Microsoft called LGPO which backs up a local group policy and allows you to import it onto another computer but I have to verify it does not backup the SID, because some day these machines will be on the same network which is why I bare metal cloned a sysprepped base image before trying to apply this policy.

The problem I am running into is that when I make changes to the "User Configuration" in the group policy editor it affects the users in the Administrators group as if I was applying them to "Computer Configuration" because there is no way for me to specify which user groups I want the policy applied to.

I was going to try messing with Group Policy Management Console but its missing from Windows Administrative Tools in Windows 10 Pro. The other method I found was opening a console window (MMC) and adding snap-ins (Group Policy Object Editor). Then clicking browse under group policy object, selecting the users tab and select the group I want to apply the policy to. This generates a GPO (Local Computer\Non-Administrators Policy) that I can then make changes to the way I would in policy editor. This works, and if I run the command "gpupdate /boot" it applies this policy to only non-administrators. The thing is I can not export this object out of console, it only gives me an option to "export list" and if I run LGPO to back it up it does not work. I noticed after the policy is applied if I look in the group policy editor the settings are not reflected there under "User Configuration" which must be why LGPO is not backing up the non-administrators policy even after it has updated and is working correctly. I also tried to save the console and open it on another computer but the settings are not saved.

So I need to either figure out how to get LGPO to backup the non-administrators policy or figure out how to make changes to user groups within group policy editor. Seems like this is a feature of the Group Policy Management Console but I was not able to add it to Windows 10 Pro with the add/remove features method.

*Banghead

Please help!