Disable Windows 10 Fresh Start and Reset this PC

2017-07-15

Question

_{Saturday, July 15, 2017 9:36 PM | 1 vote}

What are the Group Policy settings to disable these features? I already have Allow restore of system to default state set to Disabled. Are there additional settings?

I have cloned OS drives to go back to that maintain the extensive setup work and only need to be updated after I copy them back to the main OS drive in case of corruption, etc.. Therefore, these options, while good options for some, are things that would cause more work than needed to get a client back up and running.

Further, I have a couple of idiot clients who click before thinking and could through their computer back to the dark ages!

I have summarized the solutions in a post below.

All replies (8)

_{Monday, July 17, 2017 1:40 AM ✅Answered | 1 vote}

Run

reagentc.exe /disable

https://www.reddit.com/r/sysadmin/comments/420fho/prevent_win10_reset/

See also:

https://www.reddit.com/r/sysadmin/comments/420fho/prevent_win10_reset/?st=j57g4nzo&sh=ff4f0cb1

https://www.experts-exchange.com/questions/28924983/Window-10-Group-Policy-Disable-Reset-this-PC-and-Advanced-start.html

S.Sengupta, Windows Insider MVP

Thanks for that - I read through the material at the links, but some of it is above my knowledge level. So what I got was to simply run the command reagantc.exe /disable I assume from Command Prompt as Administrator.

What I now need to know is will that also disable Fresh Start in Windows Defender Security Center?

_{Wednesday, July 19, 2017 5:50 AM ✅Answered}

Hi,

To disable Reset this PC, the command is ok.

But for Fresh Start, that may not work. I have tried to capture the process when I try to produce this steps, and see that C:\Windows\system32\systemreset.exe was used to handle this process. We can try to use Applocker to block the exe to implement what you would like.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, July 19, 2017 10:37 PM ✅Answered}

To summarize:

To disable Settings>Update & Security>Recovery>Reset this PC Run Command Prompt as Administrator and at the prompt type reagentc.exe /disable and hit Enter

To disable Settings>Update & Security>Windows Defender>Device Performance & Health>Fresh Start in GPEdit.msc>Local Computer Policy>Windows Settings>Security Settings>Application Control Policies>AppLocker

Learn how to work AppLocker here:

https://www.howtogeek.com/howto/6317/block-users-from-using-certain-applications-with-applocker/

When you go to Services to Start Application Identity Service you can start it, but you cannot change it to Automatic, so it is Regedit time!

To Change the Application Identity Service to Automatic

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppIDSvc – Set Start=3

Let me know if this doesn't cover it.

_{Monday, July 17, 2017 1:06 AM}

Run

reagentc.exe /disable

https://www.reddit.com/r/sysadmin/comments/420fho/prevent_win10_reset/

Share via

Disable Windows 10 Fresh Start and Reset this PC

Question

All replies (8)

Additional resources