<div>
It must be linked to the OU with the users inside. Also, the preference item needs to be set in the user config section, not the computer config section.
</div>


<div>
The problem is if I set the GPO on the OU with the users inside, those users will not have access to the search box on any computer. I just want to apply this on a single group of computers that the users will log in to.
</div>


<div>
Loopback processing is what you need.
</div>


arnold

<div>
No, Look closer at what is possible using &quot;item level targeting&quot; (Google that). You may limit at which pc this is applied as well.
</div>


<div>
Loopback processing should not be used as it will affect all GPOs. Item level targeting is usable for this GPO only.
</div>


<div>
Not Sure I underhand McKnife's point<br />
The computer GPO with loopback processing, will reprocess all user GPOs as well as the user Configuration settings within which is what the user wants.<br />
<br />
Though, you could use WMI filter to determine whether the User GPO should apply based on the computer name pulled from the WMI filter, though that will require updates, or looking into wmi getting group members .....<br />
<br />
iI believe as &quot;Hello There&quot; referenced, COMPUTER GPO with only loopback processing and the user configuration ...<br />
<br />
Though you should be cautious and test, some registry when added by GPO could be saved within the user's profile settings....deals with roaming profiles.
</div>


IT Support

Brian Gorsky

<div>
Well we don't use roaming profiles so that isn't a problem.<br />
<br />
I was doing some research based on the information I've gotten here. I found this article: <a href="https://www.mustbegeek.com/how-to-enable-gpo-loopback-processing/#.Xqhkm2hKiM-" rel="ugc">https://www.mustbegeek.com<wbr />/how-to-en<wbr />able-gpo-l<wbr />oopback-pr<wbr />ocessing/#<wbr />.Xqhkm2hKi<wbr />M-</a> which seems to describe the exact scenario I have and recommends using loopback processing.<br />
<br />
I'm not sure of the downside to using loopback processing as it seems to do exactly what I want. Thoughts?
</div>


<div>
You have been warned to use loopback processing and the reason was given.<br />
<br />
If you don't understand what I mean by &quot;Loopback processing should not be used as it will affect all GPOs&quot;, then I guess I will have to explain it. I just don't understand why you don't look at the options of group policy preference item level targeting. It's so easy to select the computers or OUs it should apply to. Wait, Ill add pictures, soon.
</div>


itemleveltg1.png

itemleveltg2.png

<div>
If you read what Arnold's link, you could possibly understand what I mean by &quot;Loopback processing should not be used as it will affect all GPOs&quot;. The tutorial he links shows an example where a GPO with user settings is applied on users that logon to certain computers, which is what you want - right. However, any other GPO of that kind (any GPO with user settings intended only for users that logon to certain computers, used for a similar purpose) will apply to the whole OU since now the whole OU has loopback processing activated, If you wanted to exclude certain machines, you would have to setup security filtering or use Sub-OUs with GPO inheritance blocked - all these things are unnecessarily complicating your admin life.<br />
<br />
Use GPP the way my pictures show and you remain flexible.
</div>


<div>
I created a GPP as shown in the attached image but it isn't working. I tried to create the GPP on the computer side but it won't allow ILT on users, only computers. The OU the GPO is linked to is computers only.<br />
<br />
EDIT: Or should I be linking this policy to all user OU's and then use ILT for the OU with the computers I am targeting?<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2020/04_w18/1451788/Untitled.png" target="_blank" title="GPP (62 KB)"><img alt="GPP" class="file-block lazyload" style="max-width: 800px;" data-src="https://filedb.experts-exchange.com/incoming/2020/04_w18/800_1451788/Untitled.png" /></a>
</div>


Untitled.png

<div>
I am uncertain what you are asking.<br />
Are you applying this GPP to an OU where all non administrative users are? or the security filter only applies to domain users group versus authenticated_users?
</div>


<div>
I am trying to apply the GPP to all users but only when they sign in to computers in a specific OU. <br />
<br />
If possible, I would like to exempt Admins from getting the GPP at all.
</div>


<div>
the loopback would apply to all users who login into these systems by applying the user configuration portion of the GPO.<br />
The loopback GPO applies to the computer not the user.<br />
<br />
now you want to exclude certain users.<br />
Your question's end statement, &quot;I'm sure it is something simple, what am I missing? No matter who logs on to that computer, I want the Search box in taskbar hidden. &quot;
</div>


<div>
@McKnife - Bingo! Got it. Thanks for your persistence.<br />
<br />
@arnold - I realized that admins life will be easier if they have access to the searchbox in the taskbar. Yes, that was an afterthought. You did help me understand more about loopback, so thank you to you as well.
</div>


<div>
<div class="content wysiwyg-content">
I am trying to Update a registry setting for all users on a computer to hide the Windows 10 search bar in the taskbar. I'm using GPO and have set the following under Computer Configuration &gt;&nbsp;Preferences &gt;&nbsp;Windows Settings &gt;&nbsp;Registry and linked it to OU=A<br />
<br />
Action: Update<br />
Hive: HKEY_CURRENT_USER (HKC\.DEFAULT)<br />
Key path: Software\Microsoft\Windows<wbr />\CurrentVe<wbr />rsion\Sear<wbr />ch<br />
Value Name: SearchboxTaskbarMode<br />
Value type: REG_DWORD<br />
Value data: 00000000 &nbsp;(Hex)<br />
<br />
The computer is in OU=A, the user is in OU=B - the policy doesn't seem to apply.<br />
If I login as a user in OU=A, it works.<br />
<br />
I'm sure it is something simple, what am I missing? No matter who logs on to that computer, I want the Search box in taskbar hidden.
</div>
</div>


I am trying to Update a registry setting for all users on a computer to hide the Windows 10 search bar in the taskbar. I'm using GPO and have set the following under Computer Configuration > Preferences > Windows Settings > Registry and linked it to OU=A

Action: Update
Hive: HKEY_CURRENT_USER (HKC\.DEFAULT)
Key path: Software\Microsoft\Windows\CurrentVersion\Search
Value Name: SearchboxTaskbarMode
Value type: REG_DWORD
Value data: 00000000  (Hex)

The computer is in OU=A, the user is in OU=B - the policy doesn't seem to apply.
If I login as a user in OU=A, it works.

I'm sure it is something simple, what am I missing? No matter who logs on to that computer, I want the Search box in taskbar hidden.

Help with a registry setting via GPO

Windows 10 is a personal computer operating system featuring the "universal application architecture" (UAP); apps can be designed to run across multiple devices with nearly identical code, including PCs, tablets, smartphones, embedded systems, Xbox One, Surface Hub and HoloLens. Windows 10 also includes a virtual desktop system, a window and desktop management feature called Task View, the Microsoft Edge web browser, support for fingerprint and face recognition login, voice-based search (Cortana), new security features for enterprise environments, and DirectX 12 and WDDM 2.0 to improve the operating system's graphics capabilities for games.

Windows 10

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.