Jump to content

Windows 10 logon issue

mattwilkinson7

By mattwilkinson7
in Windows 7

 Share

Recommended Posts

mattwilkinson7

mattwilkinson7

Posted
Posted

When I log on to Windows 10 as an administrator, immediately I get a message saying "This app has been blocked by your system administrator". But the app in question appears to be File Explorer.

I don't understand why something as fundamental as File Explorer would be blocked by administrator.

Does anyone have any suggestions?

Thanks.

mullet_man

mullet_man

Posted
Posted
Have you got any app-locker or SRP polices running?
Do you have any existing policies in place as Rob asks?

 

Also is it happening on all machines you login to?

 

Trying moving the computer into a different OU that doesn't have any policies set?

mattwilkinson7

mattwilkinson7

Posted
  • Author
Posted

HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Permissions\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /T REG_DWORD /V "SensorPermissionState" /D 0 /F

Disables various telemetry and data collection services.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /T REG_SZ /V "Value" /D DENY /F

Sets Windows 10 privacy options.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}" /T REG_SZ /V "Value" /D DENY /F

Prevents apps from accessing the camera. Not necessary, as most monitors don’t have a built in camera. Need to consider how this could affect Skype.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}" /T REG_SZ /V "Value" /D DENY /F

Prevents apps from accessing the microphone. Possibly delete this key, as microphone may be required for Skype.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}" /T REG_SZ /V "Value" /D DENY /F

Prevents apps from accessing account information.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{9231CB4C-BF57-4AF3-8C55-FDA7BFCC04C5}" /T REG_SZ /V "Value" /D DENY /F

Prevents apps from accessing email.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "SystemPaneSuggestionsEnabled" /D 0 /F

Leaves user in control of preventing suggested apps from appearing in the start menu.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "SoftLandingEnabled" /D 0 /F

Leaves user in control of stopping tips from appearing on the Windows 10 lock screen.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "RotatingLockScreenEnabled" /D 0 /F.

Leaves user in control of Spotlight feature on the lock screen, which pulls in data from Bing to display on the lock screen.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "RotatingLockScreenOverlayEnabled" /D 0 /F

Leaves user in control of the interactive messages appearing on the lock screen.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "PreInstalledAppsEnabled" /D 0 /F

Leaves user in control of dynamically inserted app tiles from appearing in the start menu. (Suggested apps are hidden anyway).

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "PreInstalledAppsEverEnabled" /D 0 /F

Leaves user in control of disabling app suggestions.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "OEMPreInstalledAppsEnabled" /D 0 /F

Leaves user in control of dynamically inserted app tiles appearing in the start menu.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "SilentInstalledAppsEnabled" /D 0 /F

Leaves user in control of apps and games being downloaded without the user’s knowledge.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "ContentDeliveryAllowed" /D 0 /F

Leaves user in control of Disabling Tips from appearing on the Windows 10 lock screen.

 

#1709, doesn't work – HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /T REG_DWORD /V "SubscribedContentEnabled" /D 0 /F

Disabling this registry setting appears to control a part of the Windows 10 UI. Possibly related to the Start menu, Taskbar or Notifications area.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /T REG_DWORD /V "ShowSyncProviderNotifications" /D 0 /F

Leaves user in control of notifications appearing whilst in File Explorer.

 

HKCU\SOFTWARE\Policies\Microsoft\WindowsStore" /T REG_DWORD /V "AutoDownload" /D 2 /F

Disables automatic installation of WindowsStore applications.

 

HKLM + HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run" /T REG_BINARY /V "OneDrive" /D 0300000021B9DEB396D7D001 /F

Disables OneDrive. OneDrive still appears within Word, but needs to be tested further to see if it actually works.

 

HKLM\Control Panel\International\User Profile" /T REG_DWORD /V "HttpAcceptLanguageOptOut" /D 1 /F

Disables the option of websites offering a change in the language displayed by accessing the user’s language list.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" /T REG_SZ /V "Value" /D DENY /F

Does not allow apps to share and sync paired wireless devices over universal plug and play.

 

HKLM\SOFTWARE\Microsoft\Siuf\Rules" /T REG_DWORD /V "NumberOfSIUFInPeriod" /D 0 /F

Leaves user in control of disabling automatic prompts for user-generated feedback from Windows.

 

HKLM\SOFTWARE\Microsoft\Siuf\Rules" /T REG_DWORD /V "PeriodInNanoSeconds" /D 0 /F

Leaves user in control of disabling automatic prompts for user-generated feedback from Windows.

 

HKCU\SOFTWARE\Microsoft\Personalization\Settings" /T REG_DWORD /V "AcceptedPrivacyPolicy" /D 0 /F

Leaves user in control of disabling “Getting to know you” feature for Inking & Typing personalisation.

 

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /T REG_DWORD /V "Enabled" /D 0 /F

Changes Windows 10 privacy options.

 

HKLM\SOFTWARE\Microsoft\InputPersonalization" /T REG_DWORD /V "RestrictImplicitTextCollection" /D 1 /F

Enables automatic learning.

 

HKLM\SOFTWARE\Microsoft\InputPersonalization" /T REG_DWORD /V "RestrictImplicitInkCollection" /D 1 /F

Enables “Getting to know you” feature for Inking & Typing personalisation.

 

HKLM\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /T REG_DWORD /V "HarvestContacts" /D 0 /F

Leaves user in control of disabling keylogger.

 

HKLM\SOFTWARE\Microsoft\Input\TIPC" /T REG_DWORD /V "Enabled" /D 0 /F

Leaves user in control of choosing “Send Microsoft information about how” diagnostic feature.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /T REG_DWORD /V "CortanaEnabled" /D 0 /F

Leaves user in control of disabling Cortana virtual assistant.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /T REG_DWORD /V "BingSearchEnabled" /D 0 /F

Leaves user in control of disabling Bing web search.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /T REG_DWORD /V "DeviceHistoryEnabled" /D 0 /F

Leaves user in control of disabling Cortana and Bing search settings.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /T REG_DWORD /V "SearchboxTaskbarMode" /D 0 /F

Leaves user in control of removing search bar from the Taskbar.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /T REG_DWORD /V "HistoryViewEnabled" /D 0 /F

Leaves user in control of stopping Cortana from remembering history.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessAccountInfo"/D 2 /F

Prevents apps from accessing/using user account information.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessCamera" /D 2 /F

Prevents apps from using the device’s camera. Test with Skype, Is camera disabled or not?

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessEmail" /D 2 /F

Prevents apps having access to and sending emails.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessLocation" /D 2 /F

Prevents apps from knowing the device’s location.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessMicrophone" /D 2 /F

Prevents apps from accessing a device’s microphone.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessMotion" /D 2 /F

Prevents apps from accessing your device’s motion data, i.e. how many steps you have taken or how long you worked out for.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessNotifications" /D 2 /F

Prevents apps from accessing/issuing notifications.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsAccessTrustedDevices" /D 2 /F

Allows applications to run on trusted devices.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /T REG_DWORD /V "LetAppsSyncWithDevices" /D 2 /F

Does not allow apps to sync with devices.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /T REG_DWORD /V "AITEnable" /D 0 /F

Disables application impact telemetry.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /T REG_DWORD /V "DisableInventory" /D 1 /F

Disables application inventory collector.

 

HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /T REG_DWORD /V "DisableUAR" /D 1 /F

Turns off steps recorder.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /T REG_DWORD /V "DisableSoftLanding" /D 1 /F

Disables Windows tips from being displayed.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /T REG_DWORD /V "DisableWindowsConsumerFeatures" /D 1 /F

Turns off consumer experiences.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /T REG_DWORD /V "AllowTelemetry" /D 0 /F

Sets telemetry to basic.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" /T REG_DWORD /V "EnableConfigFlighting" /D 0 /F

Disables pre-release features and settings.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /T REG_DWORD /V "DoNotShowFeedbackNotifications" /D 1 /F

Disables feedback notifications.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /T REG_DWORD /V "DODownloadMode" /D 0 /F

Disables delivery optimization.

 

#HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /T REG_DWORD /V "DownloadMode" /D 0 /F

Disables non-GPO deliver optimization. May be redundant after previous key.

 

#HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /T REG_DWORD /V "DODownloadMode" /D 0 /F

Disables non-GPO deliver optimization. May be redundant after previous key.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" /T REG_DWORD /V "DisableLocation" /D 1 /F

Turns off location

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" /T REG_DWORD /V "DisableSensors" /D 1 /F

Turns off sensors.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /T REG_DWORD /V "DoNotTrack" /D 1 /F

Always send do not track.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /T REG_DWORD /V "DisableFileSyncNGSC" /D 1 /F

HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /T REG_DWORD /V "DisableFileSync" /D 1 /F

Prevents usage of OneDrive. Needs to testing for effect on OneDrive functionality.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /T REG_DWORD /V "AllowCortana" /D 0 /F

Disallow search for Cortana.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /T REG_DWORD /V "AllowCortanaAboveLock" /D 0 /F

Disallow Cortana on lock screen.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /T REG_DWORD /V "DisableWebSearch" /D 1 /F

Disallow web search from Desktop.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /T REG_DWORD /V "ConnectedSearchUseWeb" /D 0 /F. (This key may disable the start menu search).

Do not search the web or display web results in search. (Investigate how to disable web results appearing in Start Menu, without disabling the search function all together).

 

#Reg Add "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /T REG_DWORD /V "AutoDownload" /D 2 /F

Turn off automatic install/download of app updates.

 

#HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /T REG_DWORD /V "DisableStoreApps" /D 1 /F

Disable all apps from Store, left disabled by default. (Key may disable Windows 10 apps, although it appears Group Policy does this).

 

#HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /T REG_DWORD /V "RemoveWindowsStore" /D 1 /F

Turn off Store, left disabled by default.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /T REG_DWORD /V "DisableSettingSync" /D 2 /F

Do not sync any settings.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /T REG_DWORD /V "DisableSettingSyncUserOverride" /D 1 /F

Disallow users to override the above registry setting.

 

Reg Add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /T REG_DWORD /V "EnableFeaturedSoftware" /D 0 /F

Turn off featured software notifications through Windows Update.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /T REG_DWORD /V "Enabled" /D 0 /F

Disable advertising info and device metadata collection for this machine.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" /V "PreventDeviceMetadataFromNetwork" /T REG_DWORD /D 1 /F

Disable advertising info and device metadata collection for this machine.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SmartGlass" /T REG_DWORD /V "UserAuthPolicy " /D 0 /F

Prevent apps on other devices from opening apps on the current device.

 

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /T REG_DWORD /V "ARSOUserConsent" /D 2 /F

Prevent using sign-in info to automatically finish setting up after an update.

 

#HKLM\SOFTWARE\Policies\Microsoft\MRT" /T REG_DWORD /V "DontOfferThroughWUAU" /D 1 /F

Disable Malicious Software Removal Tool through Windows Update, and Customer Experience Improvement Program. Left MRT enabled by default.

 

HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows" /T REG_DWORD /V "CEIPEnable" /D 0 /F

Disable Malicious Software Removal Tool through Windows Update, and Customer Experience Improvement Program. Left MRT enabled by default.

 

#HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /T REG_DWORD /V "EnableWebContentEvaluation" /D 0 /F

Filter web content through smartscreen. Left enabled by default.

 

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System” /T REG_DWORD /V “DisableRegistryTools” /D 1 /F

Prevents users from accessing Regedit. (As of yet I haven’t found a way of preventing access for non-admin users only, I would propose creating the above registry key and then simply reversing it in Group Policy); User Configuration/Administrative Templates/System. Ensure that “Prevent access to registry tools is disabled”. *

 

- - - Updated - - -

 

I recently made the above changes in Regedit by running a PowerShell file, could any of these made this change, I think it could have?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing


×
×
  • Create New...