Disable Windows 10 Reset This PC with Group Policy Preferences?
I had this question after viewing Window 10 Group Policy: Disable Reset this PC and Advanced start.
I know you can run reagentc.exe /disable, but how do you do it with Group Policy Preferences as Jesus Vigo indicates in his article on Techrepublic.com, quoted below? We have literally thousands of machines that are mobile, and I'd hate to have to push this out in a startup script.
TechRepublic disable reset this pc
I know you can run reagentc.exe /disable, but how do you do it with Group Policy Preferences as Jesus Vigo indicates in his article on Techrepublic.com, quoted below? We have literally thousands of machines that are mobile, and I'd hate to have to push this out in a startup script.
Disable System Restore in WinRE
Log on to a Windows 10 computer with admin credentials.
Launch the command line, choosing Run As Administrator.
Enter the following command:
reagentc.exe /disable
Once the command has executed on the PC, the command prompt will confirm that WinRE has been disabled. That's it! The command must be run per computer, but it need run only once to disable the System Restore functionality from WinRE.
Note: WinRE will still be accessible, though features such as the CLI do incorporate support for authentication and will not run anonymously the way that System Restore did prior to being disabled.
As far as deployment goes, sysadmins can have this run in any number of ways: during imaging sessions as part of their thick-image; as a separate post-installation command during MDT/SCCM; as a scheduled task; through a startup script in Group Policy or Group Policy Preference; through a variety of third-party management suites; or manually, via good ole' fashioned sneakernet. The choice is yours!
TechRepublic disable reset this pc
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
@McKnife--lol, ask Microsoft why restricted users would have the ability to use Reset this PC. I've been pondering the answer to that question for quite some time.
I'm speaking of the Reset this pc function. 99.99% of our users are all restricted, and yet a number of those 99.99% have been able to use Reset this PC.
I'm speaking of the Reset this pc function. 99.99% of our users are all restricted, and yet a number of those 99.99% have been able to use Reset this PC.
ASKER
We've recently implemented SCCM but unfortunately we don't have a 100% agent deployment yet.
Based on GPO deployment/Group Policy Preferences/SCCM, what would be the *BEST/EASIEST/MOST EFFECTIVE* solution to implement this setting, and some specific steps/settings to do so?
We are going to include it in our images from now on, but for the thousands of machines already deployed...that doesn't help now.
Based on GPO deployment/Group Policy Preferences/SCCM, what would be the *BEST/EASIEST/MOST EFFECTIVE* solution to implement this setting, and some specific steps/settings to do so?
We are going to include it in our images from now on, but for the thousands of machines already deployed...that doesn't help now.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
So...since we are sending out SCCM agents, we used it to create a package. Gave it a name, entered command line: reagentc.exe /disable. and sent it out to devices that have the agent. At this point we've hit devices that have connected at least and don't have to worry about Group Policy/scheduled tasks.
And why would restricted users have the ability to use either one, in the first place?