[1703, cu] Creating Mandatory Profiles 1703

eddyc · November 17, 2017

Does it need to go in the 64 bit of the registry as well?

There doesn't appear to be anything under the WOW64 folder except for ActiveSetup - I've just added the path to the Spartan key but still the same sadly.

Wired_Inside · November 17, 2017

Do I need to edit permissions for all application packages on a separate share or can I do it on the local machine I built the profile on? Followed the video apart from this step and having issues opening uwp's

cheers

eddyc · November 20, 2017

Do I need to edit permissions for all application packages on a separate share or can I do it on the local machine I built the profile on? Followed the video apart from this step and having issues opening uwp's

cheers

You need to add those permissions from a Windows 10 machine ideally otherwise you cannot use "All Application Packages" - I had this issue initially.

Still unable to get Edge to play ball even with all of these additional permissions set. Most infuriating. Think I will have to run minus edge initially...

Faulting application name: MicrosoftEdge.exe, version: 11.0.16299.15, time stamp: 0x59cda99a

Faulting module name: EMODEL.dll, version: 11.0.16299.19, time stamp: 0x59dc5be3

Exception code: 0xc0000409

Fault offset: 0x000000000018adee

Faulting process id: 0x1728

Faulting application start time: 0x01d3621782b48ef2

Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

Faulting module path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EMODEL.dll

Report Id: 5e359a81-c9b5-4b17-8330-94780edc9313

Faulting package full name: Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe

Faulting package-relative application ID: MicrosoftEdge

eddyc · November 20, 2017

I'm determined to get to the bottom of this Edge issue and have spent some time playing tonight.

Turns out;

If I point a domain admin to that mandatory profile, edge works fine.

If I point a staff account to that mandatory profile, edge works fine.

If I point a student account to that mandatory profile and disable the GPO on the student OU, then edge works fine.

I am now working back through the policies reverting each setting at a time - I will update this post when I find the culprit - I feel like I am slowly getting somewhere now!

eddyc · November 20, 2017

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

If you set this to disabled, Edge crashes every time it is launched.

If this GPO is set to enabled or not configured, then Edge launches and works fine.

I assume this is a bug.

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

Bob_the_Goon · November 21, 2017

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

If you set this to disabled, Edge crashes every time it is launched.

If this GPO is set to enabled or not configured, then Edge launches and works fine.

I assume this is a bug.

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

I use roaming profiles and was having the same issue. Turning off that policy also worked for me so thank you for posting that. You've saved me a lot of time there!

Allowing extensions doesn't seem to be an issue for us as we have uninstalled the MS store app.

DavR · November 21, 2017

Ooooooh, this sounds good! Must give that a go, thanks for sharing @eddyc.

I guess it's a fair bet that a lot of the people who want a mandatory profile are also locking down Edge extensions with policy. And, given that there are myriad different reasons why Edge dies like this, it's been impossible to Google search....

eddyc · November 21, 2017

No problem at all @DaveAshworth

I have a new problem now though...

I created a custom start menu XML file which works brilliantly for our staff with roaming profiles.

I have pointed our students to the same file with the mandatory profile and it doesn't work for them.

Has anyone managed to get the custom start menu XML working with mandatory profiles?

Cheers, eddyc

ass17 · November 21, 2017

I would like to know also regarding mandatory profile start menu :-)

Arthur · November 21, 2017

I have pointed our students to the same file with the mandatory profile and it doesn't work for them.

I would like to know also regarding mandatory profile start menu

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile

DavR · November 21, 2017

Oh really? FFS Microsoft £$%^!

That said, I could have sworn I had Start Menu layouts working with mandatory profile when I last tried... I could be wrong though.

Arthur · November 21, 2017

That said, I could have sworn I had Start Menu layouts working with mandatory profile when I last tried... I could be wrong though.

I wonder if adding a LayoutModification.xml file to C:\Users\Default\AppData\Local\Microsoft\Windows\Shell (no space between 's' and 'hell' 😈 ) would work? Perhaps it's just the group policy start layout that doesn't work with mandatory profiles?

Example

    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
   xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
   xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
   xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
   Version="1">
           StartTileGroupCellWidth="6"
   />

Edited November 21, 2017 by Arthur

eddyc · November 21, 2017

I tried this today as it happens and ended up with Edge, Settings and Store pinned which isn’t my layout...

With the mandatory profile and the gpo I get my titles and the modern apps but not the installed software like office.

A real shame if it can’t be done

I wonder if adding a LayoutModification.xml file to C:\Users\Default\AppData\Local\Microsoft\Windows\Shell (no space between 's' and 'hell' [emoji48] ) would work? Perhaps it's just the group policy start layout that doesn't work with mandatory profiles?

Example

    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
   xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
   xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
   xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
   Version="1">
           StartTileGroupCellWidth="6"
   />

ass17 · November 21, 2017

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile

But it also says

So if it doesn’t work for either then what does it work for???????

Arthur · November 21, 2017

So if it doesn’t work for either then what does it work for???????

It works with local profiles.

ass17 · November 21, 2017

We wish to carry on using mandatory profile stored on the network as a single point of reference. We don’t want to start running startup scripts to copy the profile from the network to the c: drive of every machine, I’m sure this would work but doesn’t seem practical.

Do others plan to still use mandatory profiles for the foreseeable in windows 10?

DavR · November 22, 2017

The roaming profiles bit is definitely "not supported", rather than "can't be done". I've got Start Menu and Taskbar layouts running fairly reliably with roaming profiles here (note *fairly* reliably....)

DavR · November 22, 2017

Update - just tested my mandatory profile with the Edge settings off, as per @eddyc's suggestion. Sadly not an immediate fix, bah! I do need to attempt a new version of my mandatory profile though, with a number of tips and tricks to try.

BUT, good news, my Start Menu and Taskbar layouts via the XML and GPO work under mandatory profiles as well as roaming. I'm guessing this is another not supported, rather than can't be done...

eddyc · November 22, 2017

How?! I can only get Edge to appear on mine - Google Chrome and Internet Explorer are missing despite them being on the start menu \ all users start menu.

Are you hiding the common users icons?

Update - just tested my mandatory profile with the Edge settings off, as per @eddyc's suggestion. Sadly not an immediate fix, bah! I do need to attempt a new version of my mandatory profile though, with a number of tips and tricks to try.

BUT, good news, my Start Menu and Taskbar layouts via the XML and GPO work under mandatory profiles as well as roaming. I'm guessing this is another not supported, rather than can't be done...

DavR · November 22, 2017

How?! I can only get Edge to appear on mine - Google Chrome and Internet Explorer are missing despite them being on the start menu \ all users start menu.

Are you hiding the common users icons?

I've got Remove Common Program Groups on, Start Menu redirected, and layouts defined by XML (Office "apps" pinned to Start Menu, 3 x browsers pinned to Taskbar). This combination seems to be working for me!

Have you got the SpecialRoamingOverrideAllowed setting on? I seem to recall this was important - https://blogs.technet.microsoft.com/askpfeplat/2017/05/08/mysteriously-disappearing-start-menu-tiles-and-roaming-user-profiles/

eddyc · November 22, 2017

Hi Dave,

That is really strange then as we seem to have the same settings as you. SpecialRoamingOverrideAllowed is on.

There is one XML for staff and students.

XML works for staff with roaming profiles absolutely great. (IE, Chrome, Edge & Office Shortcuts).

XML does not work for students with the mandatory profile. (Only Edge is shown).

I'm sure it is something minor that I am missing, just to work out what!..

I've got Remove Common Program Groups on, Start Menu redirected, and layouts defined by XML (Office "apps" pinned to Start Menu, 3 x browsers pinned to Taskbar). This combination seems to be working for me!

Have you got the SpecialRoamingOverrideAllowed setting on? I seem to recall this was important - https://blogs.technet.microsoft.com/askpfeplat/2017/05/08/mysteriously-disappearing-start-menu-tiles-and-roaming-user-profiles/

eddyc · November 22, 2017

I've turned off all start menu GPOs back to "Not configured" hoping it may shine some light on this but no change - Students only get Edge...

Wonder what it is.

Arthur · February 8, 2018

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

If you set this to disabled, Edge crashes every time it is launched.

If this GPO is set to enabled or not configured, then Edge launches and works fine.

I assume this is a bug.

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

Microsoft have fixed this bug in the latest Cumulative Update for 1709 (but not 1703).

https://support.microsoft.com/en-us/help/4058258/windows-10-update-kb4058258

31 January 2018—KB4058258 (OS Build 16299.214)

Addresses issue where the Microsoft Edge Allow Extension Group Policy for the disabled state was not working.

[1703, cu] Creating Mandatory Profiles 1703

Recommended Posts

eddyc

Wired_Inside

eddyc

eddyc

eddyc

Bob_the_Goon

DavR

eddyc

ass17

Arthur

DavR

Arthur

eddyc

ass17

Arthur

ass17

DavR

DavR

eddyc

DavR

eddyc

eddyc

Arthur

Create an account or sign in to comment

Create an account

Sign in

Recent Threads

iOS 27 BYOD and Smoothwall web filtering - Connectivity Assist causing issues?

3rd Party Warranty on Existing Panels

Edge Auto Sign in Broken / Cloud Filter

Home

Forums

What's New