Windows Settings Managed by your Organization

Topic

New Reply

[PKCano]

Unscheduled “update” last night to Win 11 24H2, Home version, and now have the issue of not being able to change location (and probably other!) permissions, with the Title message, “managed by your org”, on that page. As Administrator, I AM the organization! How can I take control back?

I have come across this:

but am a bit reluctant to proceed with it, not being sure of the source. Clearly with the Home edition I don’t have GPedit available, but have made manual changes to the Registry over the years, so not quite a neophyte 🙂

 

Thanks in advance!

David

• This topic was modified 3 days ago by PKCano.
• This topic was modified 1 day, 17 hours ago by satrow.

Reply | Quote

Replies

You are seeing the message, “managed by your org” because of some Registry changes made by you manually or by a third-party script/tweaker/blocker program. If you see the message in Settings\Windows Update, the Registry changes are probably related. Review any changes that were made and try to determine which one(s) are responsible.

Reply | Quote

Thanks, but I’ve made no registry changes at all. None manually, haven’t run any third party apps to do that.

 

I did update from 10 to 11 23h2 in February, no issues. This one took me by surprise, and so far, other than the inability to change permissions, looks ok. But some apps (i.e. Firefox) needs my location, tosses me to Security to allow it, but can’t.

Reply | Quote

How did you update Win10 to Win11? Did you run Susan’s script to change the version to Win11? If you did, that made Registry changes for you.

 

Reply | Quote

No, didn’t use Susan’s script, just let Windows update deal with it. No problems at that time with location permissions or any thing else…

Reply | Quote

WSDavidO61 wrote:

“managed by your org”

Under “managed by your org” click on the link for “view configured update policies’ and post a screenshot

Reply | Quote

The message does not show up on Windows update, although I can drill down to it. Update works, no problems.

Here’s what I get:

Reply | Quote

What is the KB number of the update you received last night? Was it through Windows Update? Look at Update History and let us know what update it was.

 

Reply | Quote

Screen shot didn’t make it, try try again 🙂

 

Privacy and Security / Locations is more of a problem, nothing is available to me…

Here’s what that looks like:

 

Reply | Quote

PKCano wrote:

What is the KB number of the update you received last night? Was it through Windows Update? Look at Update History and let us know what update it was.

 

Through Windows Update, history just says Windows 11, version 24H2, no KB attached.

Latest other updates – before this one to 24H2, were

2025-04 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows 11, version 23H2 for x64 (KB5054980)

and

2025-04 .NET 8.0.15 Security Update for x64 Client (KB5056686)

both 4/28/25 and both when still on 23H2.

Reply | Quote

OK, it was the version upgrade to 24H2 that happened.

Here are some suggestions for you to try:
There is a Power Shell you can try.
There is a Registry value you can check.
The rollback to the Win version you were previously on is available for only 10 days from the update.
https://answers.microsoft.com/en-us/windows/forum/all/location-services-disabled-and-grayed-out-in/9f9ad4f3-13c7-4d15-9483-69b26db27759

 

Reply | Quote

From the link you provided (https://answers.microsoft.com/en-us/windows/forum/all/location-services-disabled-and-grayed-out-in/9f9ad4f3-13c7-4d15-9483-69b26db27759)

I first tried the regedit change, rebooted. No joy.

Then added a new user per the instructions there, rebooted. No joy. So per their info, apparently not an issue with my “normal” user account.

At the bottom of the linked MS page, one user provided a link to a procedure he claims did work, but I’m not familiar enough with the registry to know if it’s actually safe. (I do feel comfortable backing the registry and doing it though.) Thoughts?

 

 

 

Reply | Quote

Those Registry deletions in the screenshot seem extreme. I think I would pass on that without doing a lot more research. Let’s see if someone else comes up with something that works.

If not, you have the option to roll back to the previous version – instructions in Susan’s article in this weeks Newsletter – before the 10 days expires.

Reply | Quote

Thanks, that’s why I asked 🙂

I’ll wait a day or two, to see if anyone else has some ideas, before rolling back. And then grab a copy of InControl to stay on 23H2!

Reply | Quote

Make sure you don’t have any work or school account connected at Settings, Accounts, Access work or school; because “Your work or school might control some things when connected.”

1 user thanked author for this post.

WSDavidO61

Reply | Quote

b wrote:

Make sure you don’t have any work or school account connected at Settings, Accounts, Access work or school; because “Your work or school might control some things when connected.”

No, no other accounts connected, but good point!

1 user thanked author for this post.

b

Reply | Quote

On the 23h2 platform did you use any third party file explorer or any other tools not necessarily adjusting patching, but adjusting anything else?

I would roll back as this doesn’t sound normal – like permissions aren’t quite right.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

WSDavidO61

Reply | Quote

While I do use an alternate file explorer (Explorer++), I don’t use it for anything other than file maintenance. And that only in my User directory.

And quite right, permissions are definitely NOT normal 🙂

Roll back is on the agenda, but I’ll keep looking (and hoping!) for another day or two.

Reply | Quote

Did you install Explorer++? If you did, you are more than “just using it for file maintenance” and “only in your User Directory.” When you install a program, it makes changes to your system that you may not be aware of.
That goes for any other program you install, particularly tweakers like Explorer++.

1 user thanked author for this post.

Alex5723

Reply | Quote

Yes, it’s been on this machine for years. I have it set to NOT replace Explorer.

And yes, of course any installed program will make changes to the registry, or the OS wouldn’t know it was there. Not sure how Explorer++ is a tweaker? Sure, if I told it to replace Explorer, but otherwise? Wasn’t a problem going from 10 to 11.

Some “background” on me. I’ve been using home computers since the
VIC20, wrote and sold a couple of programs for the C64 / 128 line, moved to Dos 5 and Windows 3 some time later, as software I wanted to run for my business needed that platform.

But NOT any sort of guru on the registry 🙂

Reply | Quote

See How to Remove ‘Some Settings are Managed by Your Organization’ on Windows 11 or 10

1 user thanked author for this post.

WSDavidO61

Reply | Quote

Well, “Home” is my version, so gpedit not available.

Scrolled down to the manual part, opened Terminal Admin and cut/pasted in the first line:

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy /f

and get

Error: Invalid syntax

??

 

Reply | Quote

(Given) Since you have Home Edition, you don’t have Group Policy.
“Policies” can be manually set in The Registry without having Group Policy (manual settings in the same location GP would have set them).
The notice “managed by your org” implies that “something” set Policies in your Registry that are different from the default. You can run the rest of the commands (that do not have GP, only “Policy,” in them). What it’s going to do is delete any “Policies” set by any software/script (or by the User manually) in the Registry. You will need to restart the computer after making the changes.
If you installed software that made those changes, it may not function afterward (example, Explorer++) and you may need to uninstall/reinstall it.

In Control Panel\Power Options\Choose what the Power button does: turn OFF “Fast Startup”
This is the same set of commands you mentioned in a post above.
In an elevated Command Prompt (Run as Administrator) – you can copy/paste each line:

REG DELETE HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy /f
REG DELETE "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f
REG DELETE "HKCU\Software\Policies" /f
REG DELETE "HKLM\Software\Microsoft\Policies" /f
REG DELETE "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f
REG DELETE "HKLM\Software\Policies" /f
REG DELETE "HKLM\Software\WOW6432Node\Microsoft\Policies" /f
REG DELETE "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f

 

OR, you can Rollback to Win10 before the 10 days is up.
OR, do a repair install over the top saving your data and apps. This will probably prevent you from being able to rollback afterward. KB6000015 (instructions are for Win10, but the same works for Win11 with the Win11 ISO)

Note: Whatever you decide to do, you should make a full disk image backup of the computer before you start, and also a separate file backup of your data.

1 user thanked author for this post.

WSDavidO61

Reply | Quote

See added note.

Reply | Quote

Ah, so being “home” and that first one calling for GPedit is why the error came up.

Just did the rest, cut and paste, and all but the last completed successfully. That last one produced: Error: Delete request is partially completed.

Was expecting to need a reboot for that all to take effect, but just now checked and everything seems to be back to “normal”!

Managed by org is gone 🙂

Thanks to all for your help!!

1 user thanked author for this post.

b

Reply | Quote

WSDavidO61 wrote:

Well, “Home” is my version, so gpedit not available.

Use gpresult /r /z at an admin command prompt instead.

Using GPResult Command to Check Applied GPOs and RSoP Data

Reply | Quote

Hmmm, pops up what looks like a terminal window that immediately closes.

But problem is resolved via the page you linked, and skipping the command that included GPedit.

Again, thanks to all!

1 user thanked author for this post.

b

Reply | Quote