[1703, cu] Creating Mandatory Profiles 1703

[eddyc]

Does it need to go in the 64 bit of the registry as well?

 

There doesn't appear to be anything under the WOW64 folder except for ActiveSetup - I've just added the path to the Spartan key but still the same sadly.

[Wired_Inside]

Do I need to edit permissions for all application packages on a separate share or can I do it on the local machine I built the profile on? Followed the video apart from this step and having issues opening uwp's

 

cheers

[eddyc]

Do I need to edit permissions for all application packages on a separate share or can I do it on the local machine I built the profile on? Followed the video apart from this step and having issues opening uwp's

 

cheers

 

You need to add those permissions from a Windows 10 machine ideally otherwise you cannot use "All Application Packages" - I had this issue initially.

 

Still unable to get Edge to play ball even with all of these additional permissions set. Most infuriating. Think I will have to run minus edge initially...

 

Faulting application name: MicrosoftEdge.exe, version: 11.0.16299.15, time stamp: 0x59cda99a

Faulting module name: EMODEL.dll, version: 11.0.16299.19, time stamp: 0x59dc5be3

Exception code: 0xc0000409

Fault offset: 0x000000000018adee

Faulting process id: 0x1728

Faulting application start time: 0x01d3621782b48ef2

Faulting application path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe

Faulting module path: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\EMODEL.dll

Report Id: 5e359a81-c9b5-4b17-8330-94780edc9313

Faulting package full name: Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe

Faulting package-relative application ID: MicrosoftEdge

[eddyc]

I'm determined to get to the bottom of this Edge issue and have spent some time playing tonight.

 

Turns out;

If I point a domain admin to that mandatory profile, edge works fine.

If I point a staff account to that mandatory profile, edge works fine.

If I point a student account to that mandatory profile and disable the GPO on the student OU, then edge works fine.

 

I am now working back through the policies reverting each setting at a time - I will update this post when I find the culprit - I feel like I am slowly getting somewhere now!

[eddyc]

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

 

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

 

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

 

If you set this to disabled, Edge crashes every time it is launched.

 

If this GPO is set to enabled or not configured, then Edge launches and works fine.

 

I assume this is a bug.

 

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

[Bob_the_Goon]

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

 

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

 

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

 

If you set this to disabled, Edge crashes every time it is launched.

 

If this GPO is set to enabled or not configured, then Edge launches and works fine.

 

I assume this is a bug.

 

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

 

I use roaming profiles and was having the same issue. Turning off that policy also worked for me so thank you for posting that. You've saved me a lot of time there!

 

Allowing extensions doesn't seem to be an issue for us as we have uninstalled the MS store app.

[DavR]

Ooooooh, this sounds good! Must give that a go, thanks for sharing @eddyc.

 

I guess it's a fair bet that a lot of the people who want a mandatory profile are also locking down Edge extensions with policy. And, given that there are myriad different reasons why Edge dies like this, it's been impossible to Google search....

[eddyc]

No problem at all @DaveAshworth

 

I have a new problem now though...

 

I created a custom start menu XML file which works brilliantly for our staff with roaming profiles.

 

I have pointed our students to the same file with the mandatory profile and it doesn't work for them.

 

Has anyone managed to get the custom start menu XML working with mandatory profiles?

 

Cheers, eddyc

[ass17]

I would like to know also regarding mandatory profile start menu :-)

[Arthur]

I have pointed our students to the same file with the mandatory profile and it doesn't work for them.

I would like to know also regarding mandatory profile start menu

 

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile

 

[DavR]

Oh really? FFS Microsoft £$%^!

 

That said, I could have sworn I had Start Menu layouts working with mandatory profile when I last tried... I could be wrong though.

[Arthur]

That said, I could have sworn I had Start Menu layouts working with mandatory profile when I last tried... I could be wrong though.

I wonder if adding a LayoutModification.xml file to C:\Users\Default\AppData\Local\Microsoft\Windows\Shell (no space between 's' and 'hell' 😈 ) would work? Perhaps it's just the group policy start layout that doesn't work with mandatory profiles?

 

Example

    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
   xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
   xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
   xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
   Version="1">
           StartTileGroupCellWidth="6"
   />
   
   
       
           
               
               
           
       
   


   
       
           
           
       
   

Edited November 21, 2017 by Arthur

[eddyc]

I tried this today as it happens and ended up with Edge, Settings and Store pinned which isn’t my layout...

 

With the mandatory profile and the gpo I get my titles and the modern apps but not the installed software like office.

 

A real shame if it can’t be done

 

I wonder if adding a LayoutModification.xml file to C:\Users\Default\AppData\Local\Microsoft\Windows\Shell (no space between 's' and 'hell' [emoji48] ) would work? Perhaps it's just the group policy start layout that doesn't work with mandatory profiles?

 

Example

    xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"
   xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"
   xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"
   xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"
   Version="1">
           StartTileGroupCellWidth="6"
   />
   
   
       
           
               
               
           
       
   


   
       
           
           
       
   

[ass17]

https://docs.microsoft.com/en-us/windows/client-management/mandatory-user-profile

 

 

But it also says

 

 

So if it doesn’t work for either then what does it work for???????

[Arthur]

So if it doesn’t work for either then what does it work for???????

It works with local profiles.

[ass17]

We wish to carry on using mandatory profile stored on the network as a single point of reference. We don’t want to start running startup scripts to copy the profile from the network to the c: drive of every machine, I’m sure this would work but doesn’t seem practical.

 

Do others plan to still use mandatory profiles for the foreseeable in windows 10?

[DavR]

The roaming profiles bit is definitely "not supported", rather than "can't be done". I've got Start Menu and Taskbar layouts running fairly reliably with roaming profiles here (note *fairly* reliably....)

[DavR]

Update - just tested my mandatory profile with the Edge settings off, as per @eddyc's suggestion. Sadly not an immediate fix, bah! I do need to attempt a new version of my mandatory profile though, with a number of tips and tricks to try.

 

BUT, good news, my Start Menu and Taskbar layouts via the XML and GPO work under mandatory profiles as well as roaming. I'm guessing this is another not supported, rather than can't be done...

[eddyc]

How?! I can only get Edge to appear on mine - Google Chrome and Internet Explorer are missing despite them being on the start menu \ all users start menu.

 

Are you hiding the common users icons?

 

 

Update - just tested my mandatory profile with the Edge settings off, as per @eddyc's suggestion. Sadly not an immediate fix, bah! I do need to attempt a new version of my mandatory profile though, with a number of tips and tricks to try.

 

BUT, good news, my Start Menu and Taskbar layouts via the XML and GPO work under mandatory profiles as well as roaming. I'm guessing this is another not supported, rather than can't be done...

[DavR]

How?! I can only get Edge to appear on mine - Google Chrome and Internet Explorer are missing despite them being on the start menu \ all users start menu.

 

Are you hiding the common users icons?

 

I've got Remove Common Program Groups on, Start Menu redirected, and layouts defined by XML (Office "apps" pinned to Start Menu, 3 x browsers pinned to Taskbar). This combination seems to be working for me!

 

Have you got the SpecialRoamingOverrideAllowed setting on? I seem to recall this was important - https://blogs.technet.microsoft.com/askpfeplat/2017/05/08/mysteriously-disappearing-start-menu-tiles-and-roaming-user-profiles/

[eddyc]

Hi Dave,

 

That is really strange then as we seem to have the same settings as you. SpecialRoamingOverrideAllowed is on.

 

There is one XML for staff and students.

 

XML works for staff with roaming profiles absolutely great. (IE, Chrome, Edge & Office Shortcuts).

XML does not work for students with the mandatory profile. (Only Edge is shown).

 

I'm sure it is something minor that I am missing, just to work out what!..

 

I've got Remove Common Program Groups on, Start Menu redirected, and layouts defined by XML (Office "apps" pinned to Start Menu, 3 x browsers pinned to Taskbar). This combination seems to be working for me!

 

Have you got the SpecialRoamingOverrideAllowed setting on? I seem to recall this was important - https://blogs.technet.microsoft.com/askpfeplat/2017/05/08/mysteriously-disappearing-start-menu-tiles-and-roaming-user-profiles/

[eddyc]

I've turned off all start menu GPOs back to "Not configured" hoping it may shine some light on this but no change - Students only get Edge...

 

Wonder what it is.

[Arthur]

All indications point to one of the Microsoft Edge GPOs from the latest admx templates.

 

I can cause Edge to crash on launch or not depending on how this GPO setting is set.

 

User Configuration > Administrative Templates > Windows Components > Microsoft Edge > Allow extensions.

 

If you set this to disabled, Edge crashes every time it is launched.

 

If this GPO is set to enabled or not configured, then Edge launches and works fine.

 

I assume this is a bug.

 

Hopefully this will help some more of you out who are having the same issues with Edge and mandatory profiles.

Microsoft have fixed this bug in the latest Cumulative Update for 1709 (but not 1703).

 

https://support.microsoft.com/en-us/help/4058258/windows-10-update-kb4058258

 

31 January 2018—KB4058258 (OS Build 16299.214)

 

Addresses issue where the Microsoft Edge Allow Extension Group Policy for the disabled state was not working.