Create a GPO to remove Enforcement (CP Filter)

You can use a GPO to delete the relevant keys related to the enforcement of our WLM on Windows machines.  The simple method is to set up the GPO with 2 Registry items, set to delete, and specify the hives/paths as shown here:

 

 

 

To do the above:

Add a Registry item, selecting Delete as the action:

 

 

 

 

 

Select the item shown above, no need to select anything else, though you can add a second registry item to delete the CLSID entry was well if you want.

 

 

And that should be it.  Click OK and apply that to the OU you want to use to un-enforce our WLM.   You would move the machine to an OU that does not have the enforcement enabled and link the un-enforcement policy to pull that/those two keys out. 

 

Also, in the enforcement GPO, I recommend you keep the actions set to update and do not choose the option to remove the items if no longer applied.  This will reduce the chances of having only some of the items removed but not the CP filter key which leaves Windows confused about what to present for a login dialog.   It is better to use the un-enforcement GPO to remove the relevant keys completely.

Please test this on a VM or other system that is not a production system.