Search code examples
registrymicrosoft-edgegpo

Some LGPOs for MS Edge do not apply for new users


Good day!

I'm preparing the PowerShell script for applying some LGPOs in registry for computers that non domain joined. All of them applied successfully except several:

DefaultSearchProviderEnabled DefaultSearchProviderSearchURL DefaultSearchProviderName SmartScreenEnabled SmartScreenPuaEnabled

Here is what how it looks in registry:

LGPO registry settings for Edge

Interestingly! The script was run with admin rights on normal user session. Above settings successfuly applied for for this only user. All other users in PC including admin didn't applied them.

During the search in internet i found this: "This policy is available only on Windows instances that are joined to a Microsoft Active Directory domain". But why these settings applied for the user on which session the script was ran?? Is it possible to apply for all others without joining the domain?

User with applied settings:

Applied LGPO settings in Edge

All other users on the same PC for whom settings did not apply:

Not applied LGPO settings in Edge


Solution

  • Basically, you have to be either AD-joined or enrolled for device management to apply those specific group policies. Looks like this "only user" has been joined to AD domain or enrolled for device management, but you just haven't realized it.

    Pay attention to those work or school accounts, if any, that are connected to this "only user". I reproduced this issue, but today I've realized that I had one AD-joined work account connected so that I could apply those specific group policies to this user but failed on others.