Have you ever tried to change a setting in Windows 10 only to be told, “Some Settings Are Managed By Your Organization” and have permission to change them denied? This happened to me during my recent clean install of the Second Life Viewer and I am the only user on my network. I was pretty miffed. My dumb computer thought that some mysterious “organization” was more powerful than I, its lord and sole master? Here’s how to solve that problem…

“All Your Settings Are Belong to Us”

You click into the Settings area on your Windows 10 computer, attempt to make a change to one of the settings… Suddenly it appears as if a mysterious organization is controlling what you can and cannot do on your system. The good news is that you have not been hacked. But wait a minute, Microsoft, this is MY computer!

This error message appears most often when users try to tweak privacy, security, or Windows Update settings. It happens because of certain bugs in Windows that allow settings to be changed inadvertently in a way that appears to be done by the Group Policy Manager, a hypothetical person who holds authority over policies via the Group Policy management app built into Windows. Group policies are designed for organizations in which an IT manager wants to impose restrictions on all users or certain classes of users.

You may have gotten a hint of group policy during the setup of your Windows 10 installation, if you were asked “Who owns this PC?” with you or your (non-existent) organization as the choices. Choosing “your organization” may limit your ability to make changes to policies later. But there is a way to reconfigure Windows 10 to eliminate this restriction upon your godlike power over all that lies on your hard drive. It is called the Group Policy Editor.

You will need to launch the editor using administrator privileges.To do so, type into the Search box “gpedit.msc” – the Local Group Policy Editor will be the first result of such a search. Right-click on it and select “Run as Administrator.”

NOTE: If you have the “Home” edition of Windows 10, Group Policy Editor is not installed. See this page for a tutorial on how to add it to your Windows 10 Home Edition system.

In the Group Policy Editor, navigate the tree of options on the left side of the window to Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds.

It’s All About That Telemetry

With Data Collection and Preview Builds selected, you will see the option “Allow Telemetry” over on the right side of the screen. Many pundits, including me, have advised users to disable telemetry to various degrees in order to limit what Microsoft can learn about what you do on your computer. The act of limiting Microsoft’s access to your data may have triggered the “Some Settings Are Managed By Your Organization” problem. So let’s fix it!

Double-click on “Allow Telemetry” to display its options. At the top of the window, click “Enabled.” Then click the drop-down menu item in the Options section and choose option 3 – Full. Click OK to save the changes and close the window.

Now double-click “Allow Telemetry” again to open the same configuration window. This time, select “Not Configured” and click OK to save that change and close the window. Then quit the Group Policy Editor,

Go back to the setting where you saw “Some Settings Are Managed By Your Organization” and you should not see that message anymore. Full access to your Windows 10 settings should be restored.

This fix works on machines configured as home or personally-owned computers. If your machine was originally set up as an organization’s machine (or your computer really is part of a network that’s managed by your school or employer’s IT department) then this fix may not work. This post is greatly appreciated Bob R without it I would have still been lost.

Have a Great Week

From all of us at ZI Staff

Defender, the security software built into Windows 10, has a hidden setting that will block installation of programs that try to install themselves during another program’s installation. This feature is the answer to one of my most fervent tech prayers! I also have a solution for people still using Windows 7 or 8. Here’s what you need to know…

How to Block Unwanted Software

When I download and install a “free” program, I need the concentration of a brain surgeon. That’s because many free programs try all sorts of tricks to install other programs that come along with the free program’s installation file. I’m sure you know what I am talking about, but here is a clear-cut example:

The installer app of ImgBurn, a free optical disk burning program contains “InstallCore,” a program that tries to install additional software on your PC as you click through the ImgBurn installation screens. The PUA (Potentially Unwanted Apps) may or may not be things that you want or need. InstallCore inserts into ImgBurn’s installation screens tiny check-boxes already checked, which purportedly represents your conscious decision to allow the PUAs to be installed.

This dirty trick works on many people who don’t pay close attention to all of the tiny print, icons, check-boxes, “Install” buttons, and other distractions that appear during the installation of ImgBurn, and many other freebies. The more unwanted “foistware” that gets installed, the more money the authors of the software make. It’s an evil, underhanded tactic that should be stopped.

I’ve been warning folks about foistware for at least 5 years, but the problem is not going away. So it’s up to you to be aware, diligent, and equipped with the proper tools to prevent the installation of unwanted (and potentially malicious) software on your computer.

If you have Windows 10, you can configure Windows 10 Defender to block most apps that try to install themselves during another app’s installation. With this option enabled, you will (for example) get ImgBurn and nothing else. You can start ImgBurn’s installer and not have to watch it like a hawk, reading every character and inspecting every box or button that appears.

The trick is a registry modification. If the thought of tinkering with your system’s registry dismays you, I have you covered with a .REG file that automatically does the necessary without error.

If you know how to use the REGEDIT registry editing utility, open it and navigate to this key:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender

Under Windows Defender create a new DWORD named PUAProtection (if it does not yet exist). Set the value of PUAProtection to 1 to enable blocking of Potentially Unwanted Apps (PUA). (A value of 0 will disable blocking.)

Reboot the computer to let the changes take effect. If you don’t want to mess with REGEDIT, just right-click to download this .reg file, and then click “Save link as…” Enable_Windows_Defender_PUA_protection.reg.

After downloading the .reg file, double-click it to apply the registry changes. Then restart the computer to let the changes take effect.

Pass the Caveat, Please

Microsoft’s tech support note on this obscure feature of Defender explains that blocked apps are placed in the quarantine section so they won’t run. BUT… there are some exceptions.

The tech support note goes on to say: “PUAs are blocked when a user attempts to download or install the detected file, and if the file meets one of the following conditions: The file is being scanned from the browser; The file is in a folder with “downloads” in the path; The file is in a folder with “temp” in the path; The file is on the user’s Desktop; The file does not meet one of these conditions and is not under %programfiles%, %appdata%, or %windows%. ”

So if a PUA is a new one that Defender does not yet know about, or if it is not in any of the locations specified above, it will slip past this PUAProtection. But PUAProtection should catch most of the pesky toolbars, weather apps, and other junkware that useful free apps try to foist onto users.

Also important to note is that Defender defers to any third-party anti-malware program you may be running, so this junkware protection is inoperative unless Defender is your only security suite.

Another Option to Block Foistware

SO… if you’re not running Windows 10, or you don’t feel like fiddling with your Windows registry, or you are running Windows 10 with a third-party security tool such as AVG, Avast, Avira, Bitdefender, etc., then you will need another tool to block unwanted software. A nifty free service called Ninite, which makes it easy to safely install new software, and keep it all up to date.

Ninite lets you choose from a menu of about 100 popular free software titles (including ImgBurn), bundles them up into a single download, and installs them with a single click. Ninite will automatically say no to toolbars and extra junk, and will not bother you with any questions during the installations. It also skips any reboot requests from installers. For security, Ninite downloads each app from the publisher’s official site, and verifies the digital signatures.

Have a Great Week from all of us at ZI!