I am currently doing some testing with different devices with basic MDM and am working on a Surface Pro 3 with Windows 10 at the moment. It enrolls fine and it did initially receive policy (just a simple lock screen after 1 minute)

I subsequently unenrolled the device but the policy remained, worse still in the settings it now shows that "Security Policies on this PC are preventing some options being shown" so I can't change it back

There is no policy that should be applied to this machine.

I have tried enrolling again (works) and deploying new policy and the device enrolls but the policy does not seem to be applied.

Not sure where to start with troubleshooting this, are there any tools/logs things I can try to work out what is locking the settings? It would be good to do some sort of policy reset... is this possible?

Thanks

Have you went to User Accounts in control panel and check if their is an option to "reset security policies"?

Thanks,

Hi Jon

Thanks for the reply. Yep I have tried to find that option in the User Accounts part of control panel but it is not there to be selected.

Are there any client side tools/Log files? Powershell cmdlets?

i.e in GPO there are tools like RSOP/GPResult/GPUpdate is there anything equivalent to that with the MDM/OMADM? I seem to be drawing a blank when trying to see what is going on at the client side.

How about registry locations? i.e you can see where Group policy gets set. I have reg monitored and found several locations that are changed but cannot find documentation to back up the locations I have identified so I am not going to mess with it without understanding first. I was doing this as I just wanted to see if any policy was coming down when I re-joined the workplace account.

If there is any detailed documentation on this I would love to have a link to it. Not sure if my searching is not using the right keywords but I do not seem to be finding much in this area.

Thanks.

Would you mind opening a support case?  It's possible that feature was removed from Windows 10, which may be impacting here.  I'm doing some research on our side, but a ticket would be helpful to track this.

Thanks!

No problem, I will get a call logged.

Jon

Case is submitted.... let me know if you need the number.

To keep everyone updated, I have a case with Microsoft and where as before there is an option to reset policies in the accounts section in previous versions of Windows, Windows 10 does not appear to have this option.

Waiting to hear back to see of there is a way to reset policies on W10 when no policies are applying.

Any news?

No nothing yet I am afraid, still working the call with Microsoft but it is slow going. If you have the same problem I would definitely log a call. There needs to be a way of resetting policy I feel. Coming from Group Policy where you had a number of tools at your disposal to troubleshoot things like this the current situation with these polices feels a bit like a black hole.