Windows 10: Microsoft edge - default settings users can override GPO policy is not working

Hello Everyone,I am using edge ADMX policy template to configure startup page to my company site. This is working in mandatory policy but not working in recommended user can over ride Not sure what i am missing here. Please guide me to right steps to achieve this requirement.1.User can override policy GPO has been configured2. I can see the policy in the edge but it doesn't update anything under the settings

:)

 

GPO Override Policy Not Working

Following up with class in which we are making an Google Chrome Settings Override GPO for a local group -- added it at the group level; not the higher domain level. This should override the domain's (high-level) GPO that prevents downloads, prevents incognito
mode, and restrict access to netflix.com. This is according to Windows' Group Policy API documentation (Overriding and Blocking Group Policy).

When looking at the group's "Group Policy Inheritance" tab in the Group Policy Management tool from the Server Manager (Wins 2012), I am seeing that the override GPO takes precedence over the previously applied restrictive settings from the higher domain
policy. This is what we want.

However, when logged into a domain client -- with the credentials of the intended local group member -- the local group policy is not listed in Chrome://policy. The browser is still blocking netflix.com, downloads, and the use of incognito mode.

I restarted the client computer many times and ran the gpupdate /force script and successfully updated the policy several times. I also went as far as to enforced the GPO in the inheritance table for the local group taken precedence over all other GPOs.

Nothing is happening. HELP!

 

New Microsoft Edge Group Policies and MDM settings (Preview)

Full article at Microsoft Docs: New Microsoft Edge Group Policies and MDM settings | Microsoft Docs

 

GPOs to Disable Account Settings are not working


Hello,

I need to disable the below settings. I have tried using the below GPO settings, ran gpupdate /force and restarted 2 domain computers. I then logged into each computer with a different domain account. The live tiles were still changing. I am still able to add a PIN to the account. I was still able to add a Microsoft account. (I do not have a Work/School account but the option was still available. I added the same Microsoft account to both domain users. The Sync your settings is all grayed out and all set to off. However, I noticed the desktop background synced and the Favorites Synced. How do I disable all these settings so they cannot be used and are turned off?

Disable Live Tiles
Disable Settings - Accounts - Sing-in Options - Create a PIN
Disable Settings - Accounts - Your account - Add Microsoft account
Disable Settings - Accounts - Your account - Add a work or school account
Disable Settings - Accounts - Sync your Settings


Disable Live Tiles
GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar
Clear history of Tile notification on exit Setting: Enabled

GPO - User Configuration/Policies/Administrative Teplates/Start menu and Taskbar/Notifications
Turn off notifications network usage Setting: Enabled
Turn off tile notifications Setting: Enabled

Disable Settings - Accounts - Sing-in Options - Create a PIN
GPO - Computer Configuration/Policies/Administrative Templates/System/Logon
Turn on PIN sign-in Setting: Disabled

Disable Settings - Accounts - Your account - Add Microsoft account
GPO - Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/Security Options
Accounts: Block Micorosoft Accounts Setting: User's can't add or log on with Microsoft Accounts

GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/App runtime
Allow Microsoft accounts to be optional Setting: Enabled

Disable Settings - Accounts - Your account - Add a work or school account
GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Microsoft Passport for Work
Use Microsoft Passport for Work Setting: Disabled

Disable Settings - Accounts - Sync your Settings
GPO - Computer Configuration/Policies/Administrative Templates/Windows Components/Sync your settings
Don not sync Setting: Enabled

Thanks for the help,

Eric