The Turn off Federation Service machine setting should be configured correctly. This policy setting prevents a Federation Service in Active Directory Federation Services (AD FS) from being installed or run. If you enable this policy setting, installation of a Federation Service fails. If a Federation Service has already been installed, all requests made to it fail. If you disable or do not configure this policy setting, installation of a Federation Service is allowed and any installed Federation Service functions normally. Fix: (1) GPO: Computer Configuration\Administrative Templates\Windows Components\Active Directory Federation Services\Turn off Federation Service (2) KEY: HKLM\Software\Policies\Microsoft\Windows\ADFS\DisallowFederationService