Prohibition for employees from editing notification settings as they want

堀 真大 1 Reputation point
2021-07-13T14:59:51.423+00:00

Hi,
Is there any way to prohibit domain users from editing notification settings and to fix them by IT department?
Namely, below:

  1. Setting > System > Notification & actions > Notications
  2. Setting > System > Focus assist
  3. Windows Security > Settings > Notifications(> Virus & threat protection notifications)

I am hopefully wondering if we could distribute these notification settings and prohibit users from editing them at their will with group policy or MECM policy.

Mentioning a bit more details, forcing notification settings allowing Windows Defender notifications to show up at lower right on desktop screen is the essence.
In Addition, I figured, in order to do so, at least setting 2 is required to be off and 3 is on.
(If someone knows, is this correct?)

I would appreciate any advice or knowledge about this.
Thank you,

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Reza-Ameri 17,341 Reputation points Volunteer Moderator
    2021-07-15T16:21:31.06+00:00

    You may navigate to:

    User Configuration -> Administrative Templates -> Start Menu and Taskbar -> Notifications

    and

    Computer Configuration ->Administrative Templates->Windows Components->Windows Security->Notifications

    0 comments No comments

  2. JiayaoZhu 3,926 Reputation points
    2021-07-16T09:30:35.1+00:00

    Hi,

    Thanks for posting on our forum!

    There are a couple of things I need to check and clarify:

    1. If you haven't set any policies for enabling Windows Defender notifications, you should follow @Reza-Ameri to set certain policies.
    2. If you have set certain policies on your DC but your local users still can edit notification settings from their local GPO, then don't worry, normally DC's GPO have priority over local GPO. This means regularly, your DC GPO will overlap local group policy, and you users will be prohibited from using GPO to edit notifications.
    3. if you manage your notifications from Windows Security>Settings, I need to check whether your policy works simultaneously with your settings from Windows security.

    Thanks for your support!

    BR,
    Joan


    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.