Jump to content

Recommended Posts

Posted

Afternoon all,

 

I've been using LTSB version of windows 10 for a while now and it basically works perfectly out of the box with our current group policies other than changing the login background using a registry hack.

 

But today I loaded up windows 10 education edition... Oh my word what a mess!

 

The start menu contains all kinds of junk such as games, store and metro apps. Whats the easiest way to remove these and lock it down?

 

Also startup takes about twice as long for a new local profile :/ Any tips on speeding it up?

Posted (edited)

Ok since all the info is all over the place on this forum I will attempt to collate it in one place

 

Step 1 - Disable cloud stuff

Start menu >> cmd >> gpedit.msc

 

Enable this setting.

 

Computer Configuration » Administrative Templates » Windows Components » Cloud Content » Turn off Microsoft consumer experiences

 

 

Step 2 - Disable bloatware apps

 

Start menu >> Powershell

 

Get-appxpackage -allusers *bing* | remove-appxpackage
get-appxpackage -allusers *camera* | remove-appxpackage
get-appxpackage -allusers *communicationsapps* | remove-appxpackage
get-appxpackage -allusers *people* | remove-appxpackage
Get-appxpackage -allusers *phone* | remove-appxpackage
get-appxpackage -allusers *messaging* | remove-appxpackage
get-appxpackage -allusers *maps* | remove-appxpackage
get-appxpackage -allusers *onenote* | remove-appxpackage
get-appxpackage -allusers *officehub* | remove-appxpackage
Get-appxpackage -allusers *skypeapp* | remove-appxpackage
get-appxpackage -allusers *getstarted* | remove-appxpackage
get-appxpackage -allusers *solitaire* | remove-appxpackage
get-appxpackage -allusers *3dbuilder* | remove-appxpackage
get-appxpackage -allusers *Xbox* | remove-appxpackage
get-appxpackage -allusers *communicationsstore* | remove-appxpackage

 

Step 3 - General registry settings

 

REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SystemPaneSuggestionsEnabled /d 0 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v DisableThumbnailCache /d 1 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v LaunchTo /d 1 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v StartupDelayInMSec /d 0 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Search" /v BingSearchEnabled /d 0 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Search" /v SearchboxTaskbarMode /d 1 /t REG_DWORD /f
REG ADD "HKLM\_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions" /v NoHelpItemSendFeedback /d 1 /t REG_DWORD /f
REG DELETE "HKLM\_USER\Software\Microsoft\Windows\CurrentVersion\Run" /v OneDriveSetup /f
REG ADD "HKLM\_SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v VerboseStatus /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /v DisableAddSiteMode /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsConsumerFeatures /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\Personalization" /v NoLockscreen /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v Disabled /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /d 0 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v ConnectedSearchUseWeb /d 0 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /d 1 /t REG_DWORD /f
REG ADD "HKLM\_SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoRebootWithLoggedOnUsers /d 1 /t REG_DWORD /f

Edited by zag
  • Thanks 1
Posted

Also found this script burried in that thread:

 

if exist "c:\appsremoved.bat" goto :end
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.BingWeather_2016.629.703.0_n eutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.Getstarted_4.0.9.0_neutral_~ _8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.Messaging_2.7.1001.0_neutral _~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.MicrosoftOfficeHub_2015.7031 .23501.0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.MicrosoftSolitaireCollection _3.11.7293.0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.People_2016.709.155.0_neutra l_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.SkypeApp_11.7.102.0_neutral_ ~_kzf8qxf38zg5c
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.WindowsAlarms_2016.717.1015. 0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:microsoft.windowscommunicationsapps_20 15.6965.41051.0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.WindowsFeedbackHub_1.3.1741. 0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.XboxApp_2016.728.453.0_neutr al_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.XboxIdentityProvider_2016.71 9.1035.0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.ZuneMusic_2019.6.23041.0_neu tral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.ZuneVideo_2019.6.22511.0_neu tral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.3DBuilder_11.1.9.0_neutral_~ _8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.Windows.Photos_2016.722.1006 0.0_neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.WindowsCamera_2016.404.190.0 _neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.WindowsMaps_2016.615.1802.0_ neutral_~_8wekyb3d8bbwe
dism.exe /online /Remove-ProvisionedAppxPackage /PackageName:Microsoft.WindowsSoundRecorder_2016.70 7.1114.0_neutral_~_8wekyb3d8bbwe
copy "\\[sERVERNAME]\NETLOGON\killapps.bat" "c:\appsremoved.bat"end

Posted (edited)

@zag. The registry settings you posted in step 3 won't be of much use on their own (you're missing the reg load and unload commands because the post they were copied from is to do with modifying the default user profile).

 

Many of the settings also have equivalent GPOs so it would probably be better to set them there.

Edited by Arthur
  • Thanks 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...