Share via

Disable all search in Windows 10 using local policy

Question

Friday, February 23, 2018 8:15 PM

Hello,

I am trying to setup a Windows 10 Enterprise local policy to prevent all searching from being done for a local user on a stand alone computer. Below are the policies (for the specific user), services and registry settings entered in the system

All the search is disabled except for taskbar search.  I hide it by right clicking the taskbar, clicking search and select hidden.  This only hides the search in the taskbar but not searching the computer.  When I click the start button and start typing, it still performs a search.  I can type explorer and it still comes up and I can click it to run it.

Anybody know how to disable searching completely?

  • User Configuration\Administrative Templates\Control Panel\Personalization
    • Set Enable screen server as Disabled
    • Set Password protect the screen as Not Configured
  • User Configuration\Administrative Templates\Start Menu and Taskbar
    • Set Remove All Programs list from the Start Menu as Enabled and set the action Remove and disable setting
    • Set Remove Search link from Start Menu as Enabled
    • Set Remove Search Computer link as Enabled
    • Set Remove Run Menu from Start Menu as Enabled
    • Set Remove Favorites menu from Start Menu as Enabled
    • Set Remove common program groups from Start Menu as Enabled
    • Set Remove See More Results/Search Everywhere link as Enabled
    • Set Do not search internet as Enabled
    • Set Do not use the search-based method when resolving shell shortcuts as Enabled
    • Set Do not search for files as Enabled
    • Set do not search communications as Enabled
  • User Configuration\Administrative Templates\AllSettings
    • Set Prohibit access to Control Panel and Settings as Enabled
  • User Configuration\Administrative Templates\System\Ctrl+Alt+Del Option
    • Set Remove Task Manager setting as Enabled

The following Services were Stopped and set as Disabled:

  • Windows Update
  • Windows Search

The LUA was disabled in the registry

  • In HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\ Policies\System
    • set EnableLUA = 0

All replies (6)

Monday, February 26, 2018 3:54 AM

Hi,

Based on your description, I found a thread may give you some ideas, please refer to the link:

Windows 10, remove Cortana/Search box from task bar via GPO (for OSD)

https://social.technet.microsoft.com/Forums/ie/en-US/af677b8e-f30d-4fbc-a3b7-cd70c001c89f/windows-10-remove-cortanasearch-box-from-task-bar-via-gpo-for-osd?forum=win10itprosetup

Best Regards,

Tao

Please remember to mark the replies as answers if they help. If you have feedback for TechNet Subscriber Support, contact [email protected].

Monday, February 26, 2018 2:58 PM

Hi,

I saw that thread already.  It hides the search but does not disable it.  When I click the start button and start typing, it still performs the search.

Thanks anyway.

Brian

Tuesday, August 7, 2018 10:39 PM | 1 vote

I believe it is possible to rename the "Microsoft.Windows.Cortana..." folder and this will prevent Windows from being able to search the computer locally.

I just tested it on one of my computers running Windows 10 (1803) and it is no longer able to "type to search" from the Start Menu.

Here's how I did it:

1) Go to C:\Windows\SystemApps\

2) Attempt to rename "Microsoft.Windows.Cortana_cw5n1h4txyewy" to something arbitrary.

3) You will be prompted that it cannot be done because it is open in another program. Open Task Manager.

4) Find "Cortana" in the Background processes

5) Right-click and click "End task"

6) Quickly try to switch over to the prompt to rename the "Cortana" folder and click "Try again"

7) If you catch it fast enough, it should rename the folder. 

You can then test and see that local searching has been disabled.

I also found someone who said this can be done through GPO, adding a software restriction to the same "Cortana" folder, but I have not tested this myself. That method seems to be preferable if the path ever changes.

Let me know if it works for you or not.

Thursday, August 15, 2019 8:45 PM

This method of renaming the folder worked PERFECTLY. Windows Search has been completely disabled.
THANK YOU VERY MUCH! :)

Thursday, October 17, 2019 5:40 PM

Camlen92,

You rock! this is exactly what I have been searching all over for. I gave you points for this and up-voted. Amazing that you got this when I can't find it anywhere else.

I want to expand on your idea here and future posters can choose which of us to up-vote. I could not seem to rename this folder while trying to close searchui.exe which is Cortana. Here is what I did and it works great.

1) go into the C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h4txyewy folder

2) find the file called searchui.exe and right click on it

3) choose properties and go to security

4) click advanced below and then click the change button next to Owner at the top

5) make yourself the owner of the item and save it

6) You can now rename this item without doing anything special

This will kill the ability to search in the start menu and many other locations for all users on the computer. I just wanted to kill the ability to search in a kiosk environment I created for one user. I like the ability to search under administrator to get around faster.

Do the following to restrict only one user. Do the steps above to take ownership, but don't rename searchui.exe.

1) Go back to the security tab for the searchui.exe in properties

2) click edit and add the user that you want to restrict from searching

3) Click the check boxes to deny everything for that user.

This will only stop that one user profile from searching at the start menu or anywhere else. This stops them from hitting windows key and starting to type things like control panel etc...

Thanks

Friday, December 20, 2019 9:58 AM

The GPO Software restriction works. that is the best option.

this was tested on Windows 10 1803 and 1909