Scenario 3: If the machine is domain joined, then the domain controller is responsible for managing this setting

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Microsoft provides documentation on how to configure policies. This link provides examples for setting Branch Cache and Windows Firewall settings. While we desire to set Fast User Switching settings: Use Group Policy to Configure Domain Member Client Computers we will use similar instructions here to describe the steps necessary to perform to Hide entry points for Fast User Switching

  1. On a computer upon which the Active Directory Domain Services server role is installed, in Server Manager, click Tools, and then click Group Policy Management. The Group Policy Management console opens.
  2. In the Group Policy Management console, expand the following path: Forest: http://example.com, Domains, http://example.com , Group Policy Objects, where http://example.com is the name of the domain where the Fast User Switching client computer accounts that you want to configure are located.
  3. Right-click Group Policy Objects, and then click New. The New GPO dialog box opens. In Name, type a name for the new Group Policy Object (GPO). For example, if you want to name the object FastUserSwitching Client Computers, type FastUserSwitching Client Computers. Click OK.
  4. In the Group Policy Management console, ensure that Group Policy Objects is selected, and in the details pane right-click the GPO that you just created. For example, if you named your GPO FastUserSwitching Client Computers, right-click FastUserSwitching Client Computers. Click Edit. The Group Policy Management Editor console opens.
    1. This will launch the Group Policy Management Editor - which looks almost identical to the Local Group Policy Editor tool presented above.
    2. As shown above with LGPE - navigate to FastUserSwitching Client Computers → Computer Configuration → Policies → Administrative Policy definitions (ADMX files) retrieved from the local computer. → System → Logon
    3. Select and Configure the Hide entry points for Fast User Switching setting as desired
    4. The above has created a policy, but has not defined where the policy is applied. After saving the policy, close the editor and return to the group policy management tool.
  5. Apply the policy using one of these methods:
    1. Under Security Filtering, choose the computers the policy applies to:
      • Remove "Authenticated Users" from the list
      • click the Add… button
      • in the Select User, Computer, or Group dialog, click the Object Types…
      • Uncheck Built-in security principals, Groups and Users
      • Check Computers
      • Click OK
      • Choose the computer names the policy is to apply to.
    2. Apply to an Organizational Unit that already has computers associated with it:
      Note:In this scenario, the computers should be assigned/moved to the OU so that they only get the policies intended for that target
      • Right click an existing OU
      • Select "Link an Existing GPO…" menu option
      • Select the policy that was created above
      • Click OK
    3. Create a new OU:
      • Assign computers to the OU (either using Active Directory Users and Computers (ADUC), or the add button button detailed above)
      • Apply the GPO to the OU as indicated above
  6. Application of the policy is governed by the Windows services related to policy (gpsvc - Group Policy Client).

    To force policy to apply on a particular PC, from an elevated command prompt, type: gpupdate /force