Windows 8.1 Mandatory Profile and Modern Apps

[zebwainwright]

Hi,

 

We are having a lot of difficulty getting mandatory profiles to work on our Asus T100TA tablets. We really need to lock them down and Deep Freeze is not an option as they don't have Ethernet ports so we can't WOL to thaw them and push out updates and software. And we have 1200 of them, so manually touching them is not an option. The OS is Win 8.1 Enterprise x86.

 

Basically, as soon as we log on with an account set as a mandatory profile everything works but the Modern and Native apps. When you first go to the start screen they all show up. Then a little progress bar appears next to them and they error out. My understanding is that it is trying to "Install" the apps for the new user. Since it is a mandatory profile it is considered a new user every time right? I don't think it's permissions because all domain users are set as standard users but if I make that account a standard profile it works fine.

 

There error I get when I try and actually open an app is "This app cannot be installed. Check the Windows store for more info."

 

I am open to other ways of locking down these computers, but really want to use mandatory profiles. There has to be something obvious that I am missing.

 

 

Here is what I have tried so far:

 

- Make that account a normal, non-mandatory account and log in. The apps work. Then I copy all the data from C:\USERS\\AppData\Local\Packages to a flash drive.

- Delete that account and then make it mandatory again and log-in with the mandatory profile.

- Log-off and log in as admin and copy all the files into the Local\Packages folder

- Give the user full permissions to Program Files\WindowsApps

 

Tried the same thing but copied the entire LOCAL folder over. I know the apps and settings are user specific, so there is something in the way I am creating my mandatory profile, or in the profile itself.

 

I am creating the profile by creating a profile, naming it Default, and then editing the registry to change all instances of the current user to %uersname% and giving everyone permissions when I copy the profile.

[DMcCoy]

You cannot use mandatory profiles *and* Apps. It is not possible and Microsoft don't care. https://support.microsoft.com/en-us/kb/2795607

[10101010]

Have you looked at this GPO setting - in a similar postion myself, but haven't tested yet.

'Enable'

'computer configuration\admin templates\windows components\App Package Deployment\allow deployment operations in special profiles'