Can someone sanity check this? Blocking parts of the Settings App via Group Policy.

[psydii]

I'm not seeing a setting in Group Policy that the documentation says should be there.

 

Here is the documentation:

https://docs.microsoft.com/en-us/windows/client-management/manage-settings-app-with-group-policy

 

The setting I don't see is:

User Configuration > Administrative Templates > Control Panel > Settings Page Visibility.

 

 

I *do* see the equivalent setting under Computer Configuration. Anyone else getting this?

 

I have got the V2 ADMX for 1803 in PolicyDefinitions and my DCs are all in sync.

 

 

TIA.

[meakjoe]

Are you running the right OS if its for server changes...

 

Windows Server 2016 with KB 4457127 applied will have both User and Computer policy.

 

And the right ADMX files for 1809 if its for Windows?

 

Windows 10, version 1809, added User policy for the Settings app.

Edited February 14, 2019 by meakjoe

[psydii]

Ah. Skimmed the documentation too fast. Mostly on 1803, Bother.

 

Thank you.

[Katy]

Ah. Skimmed the documentation too fast. Mostly on 1803, Bother.

 

Thank you.

 

I've got this set on 1803 by setting the computer reg setting within the user policy:

 

User GP Preferences -> Registry

 

Update Key: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer

Value name: SettingsPageVisibility

Value: showonly:sound;display;printers;easeofaccess-narrator etc etc

 

It will change it for the entire PC but just stick a setting to delete that key in the user policy for IT staff/admins, so that you can get at the settings.

[mavhc]

I've only enabled the account page for fingerprint usage for pupils, so then I make sure those computers have 1809. Staff I've not blocked.

[psydii]

I've got this set on 1803 by setting the computer reg setting within the user policy:

 

 

It will change it for the entire PC but just stick a setting to delete that key in the user policy for IT staff/admins, so that you can get at the settings.

 

Cunning.

 

I can target all student use computers fairly easily, so will stick with the GP route for now, but appreciate the set/delete trick to target by user/group.