Disabling Windows 10 Notifications via Group Policy
****This procedure only works in Windows 10 build 1607 and above!****
Hello there fellow Windows 10 users!
A question that I get asked frequently by customers who are deploying Windows 10 these days is whether or not it's possible to disable specific notifications within the Action Center. The reasons for wanting to do this are many, but the most common reason is because a customer has decided to utilize a third-party security suite on their system, and they have turned off the Security Center service to keep the OS from repeatedly warning them that the Fire Wall profiles have been turned off, the Windows Defender service has been turned off, etc. Unfortunately, the OS really wants you to keep the Security Center service turned on (for good reason!), so it will periodically remind you that the service has been stopped, and recommend that you turn it back on within the Action Center. My recommendation has always been to ensure that you are using a security product that uses our COM API's to play nice with Security Center, but some super secure organizations still turn it off and rely on other security software that's installed on the Operating System.
So there is our dilemma! Prior to the release of Windows build 1607 (a.k.a. the Anniversary build), it was not possible to selectively disable specific notifications from popping up within the Action Center. While Windows 7 used to have some notification registry keys for the Security Center that you could tinker with to turn off the notifications, those settings did not carry through to Windows 8/8.1/10. The 1511 and earlier builds of Windows 10 would allow you to disable SOME notifications from firing and ending up in the Action Center, but not all. In builds of Windows 10 prior to 1607, if you wanted to disable the Security Center (and may other) warnings from appearing within the Action Center, you're only option was to turn on a local or group policy setting that essentially turns off ALL notifications that may appear within the Action Center. As you may have guessed, this approach really stunk because it prohibited you from receiving other useful notifications from applications that you may have wanted to receive notifications from... like the built-in email application, and notifications from Outlook!
Luckily, notification behavior appears to have changed significantly starting with Windows 10 build 1607. I say "appears" because I stumbled across the new behavior while performing process traces for a completely unrelated issue that I was troubleshooting! I have yet to find any documentation that refers to these changes, but the behavior has definitely changed in the favor of customers who wish to have the ability to selectively disable specific notifications across the board for all users.
So how does this new behavior help us selectively disable notifications? I'm glad you asked! Windows 10 build 1607 and above appears to now store the notification configuration data for each user within the following registry key: HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings. When a notification is disabled, an Enabled DWORD registry value is created within a corresponding child key, with a value set to 0. If you've ever taken a look at the notifications settings within Windows 10, you've undoubtedly seen that there are numerous built-in services and applications that we can disable notifications on, and each one of those services and applications has it's own string that the OS recognizes.
Now I bet you're thinking that it would sure be nice of me to list all of these keys. Don't worry, I will below. But I can also offer you something that's potentially better, depending on how you'd like to deploy these settings. I recently worked on a Windows 10 deployment project with a customer who wished to turn off most of the default built-in notifications. They also didn't want to do it via preferences (long story). So what I ended up doing is creating a custom ADMX template for them that allowed their administrators to turn on and off the notifications for all users at will. A download link for the template files can be found at the bottom of this article. When the template is imported into either the local or Central policy store, you end up with an additional User Configuration\Administrative Templates\Windows Components GPO category that looks like this:
****This part is important!****
Those of you with a keen eye may have noticed that the policy settings look a bit different from other policy settings that you can define within gpedit or GPMC. There's a reason for this, and it's a reason that you need to bear in mind for any future changes that you make! The policy settings that my ADMX file lets you define are NOT managed policy settings, as the registry values that the policy creates are not located in any of the managed SOFTWARE\Policies registry keys. This means that the registry values that the ADMX file creates are considered to be preferences (different from GPP slightly), which makes sense considering that these values are usually set on a per-user basis. As of the time of the writing of this article, the notification subsystem in Windows 10 does not appear to support managed registry values, as it completely ignores any registry values that we add to HKCU\SOFTWARE\Policies key. So what does this mean if you chose to use the ADMX file to disable the notifications? It means that any notification that you chose to disable will STAY disabled, even if the Group Policy Object that you've created is unlinked from the system that it's applying too. If you wish to re-enable a particular notification, you'll have to do one of two things:
- If the GPO is still applying to your systems, you can easily re-enable the notification by simply modifying the above GPO settings and selecting the 'Disabled' option. This option changes the Enabled 0 value to a 1, which causes the OS to ignore the setting and enable the notification.
- If you have unlinked the policy from a system and wish to enable the notification, you'll either have to manually remove the associated registry key, or simply go into the Notifications section of the Settings app and turn the notification back on.
For those of you who don't mind creating a Group Policy Preference GPO, you could also disable the notifications by simply adding any of the below registry keys and values to your policy, and then linking the policy to the users that you wish to disable the notifications on. Since the registry keys and values that we are putting in place are considered to be preferences so far as the OS is concerned, it only makes sense to deploy the registry keys and values using GPP! If you don't need the visual cues that are provided by the ADMX file, then this method is for you.
Here are the keys and the values that will allow you to disable notifications from most of the built-in apps and services in Windows 10:
Disable Security and Maintenance Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance\Enabled = 0 (DWORD)
Disable OneDrive Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Microsoft.SkyDrive.Desktop\Enabled = 0 (DWORD)
Disable Photos Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Microsoft.Windows.Photos_8wekyb3d8bbwe!App\Enabled = 0 (DWORD)
Disable Store Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Microsoft.WindowsStore_8wekyb3d8bbwe!App\Enabled = 0 (DWORD)
Disable Suggested Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.Suggested\Enabled = 0 (DWORD)
Disable Calendar Notifications
Disable Cortana Notifications
Disable Mail Notifications:
Disable Edge Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge\Enabled = 0 (DWORD)
Disable Audio Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.AudioTroubleshooter\Enabled = 0 (DWORD)
Disable Autoplay Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.AutoPlay\Enabled = 0 (DWORD)
Disable Battery Saver Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.BackgroundAccess\Enabled = 0 (DWORD)
Disable Bitlocker Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.BdeUnlock\Enabled = 0 (DWORD)
Disable News Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Microsoft.BingNews_8wekyb3d8bbwe!AppexNews\Enabled = 0 (DWORD)
Disable Settings Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel\Enabled = 0 (DWORD)
Disable Tablet Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.System.Continuum\Enabled = 0 (DWORD)
Disable VPN Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.RasToastNotifier\Enabled = 0 (DWORD)
Disable Windows Hello Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.HelloFace\Enabled = 0 (DWORD)
Disable Wireless Notifications
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.WiFiNetworkManager\Enabled = 0 (DWORD)
That about sums it up people! Now go out and disable notifications to you or your customer's hearts content! Until next time!