Scenario 2: The machine is not joined to a domain

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

In this scenario, presumably, an administrator prepared the machine by installing Windows, or purchased a device that is preinstalled. Depending on the OS level/Edition, the admin has 2 choices on how to configure this settings.

  1. Windows Home: does not come preloaded with GPEDIT.MSC - so the only choice for setting the value is by Regedit.
    There is a way that can be used to get GPEdit to run on a home edition: Fix Gpedit.msc Not Found In Windows 10/Windows 11 As the article describes, there are many reasons why this isn't functional, however, given the Home edition problem, the feature must be enabled under the heading "Install gpedit.msc in Windows Home Edition" - which provides command line instructions for installing the tool from Microsoft via an elevated command line prompt.
    1. Run the following commands:

      i. FOR %F IN ("%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~*.mum") DO (DISM /Online /NoRestart /Add-Package:"%F")

      ii. FOR %F IN ("%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~*.mum") DO (DISM /Online /NoRestart /Add-Package:"%F")

    2. The alternative choice is to directly set the value via regedit.exe
  2. Windows Pro or above: - GPEDIT.MSC can be directly executed
    1. in the search bar, type "edit group policy" and start the application (Windows 10/11) - select the best match as as shown here to start the application:
    2. alternatively, press windows key + r key combination which will bring up the run command box
    3. type gpedit.msc and hit enter to start the group policy editor
    4. Alternatively, or use the search bar and select the best match as as shown here to start the application:
  3. Navigate to Local Computer Policy → Computer Configuration → Administrative Templates → System → Logon in the left navigation bar, then in the right side window, Select Hide entry points for Fast User Switching - adjust this value as desired. When ready, restart the PC for the policy to apply.