[1709, fcu] StartMenu - Redirected but Apps still showing

[Steve21]

Good Afternoon All,

 

Just trying to fix a few bits on my new test build and wondered if I'm missing the obvious on this one.

 

I've redirected the startmenu (old style way) and removed the common programs as normal which is working fine, the (Red) menu is showing as expected. I know the (Green) tile area is done by using the DefaultLayout/LayoutModification templates etc and that's fine still need to sort that bit, but what I can't work out is where you can remove the Apps from the StartMenu side if you don't uninstall them.

 

 

Example being how to remove that Calculator App from the Start Menu as there seems to be nothing it's referencing when it's creating it unless I'm missing a file/GPO somewhere?

 

Probably an easy one!

 

Thanks,

Steve

[karlr]

As far as I've seen there isn't a way of removing those apps from the start menu short of uninstalling them. An option I am considering is prefixing my own start menu folders with a symbol (e.g. "- Microsoft Office 2016") to force them to group together at the top

[Steve21]

That's a shame :s I know some of them I want to remove, but some like calc seemed easier to leave in there as options, just didn't want it messing up my start menu!

 

Thanks,

Steve

[Warwick_Tech]

If you 'lock' the apps via app locker they will not be uninstalled, but not load for new users either until 'unlocked'

 

Blocking built-in apps in Windows 10 using Applocker – CCMEXEC.COM – Enterprise Mobility

 

but 2 things to be aware of;

you need to edit the policy on a PC that has the apps installed (Use RSAT if your server is below 2012) https://www.microsoft.com/en-gb/download/details.aspx?id=45520

 

and second when an app locker policy is in place, a lot of PC's will continue to block the apps unless specifically set to 'allow' - Even if the GPO is removed and updates forced.

[karlr]

Sounds like the AppLocker policies are very close but no cigar? The fact that it'll leave state in place even if the policy is removed is quite unfortunate. Still, I suppose it could be useful for blitzing specific apps that are impossible/hazardous to remove would never be conceivably needed.

[Dave_G]

Sounds like the AppLocker policies are very close but no cigar? The fact that it'll leave state in place even if the policy is removed is quite unfortunate. Still, I suppose it could be useful for blitzing specific apps that are impossible/hazardous to remove would never be conceivably needed.

 

We had a similar issues with the Start Menu and the idiosyncrasies of AppLocker on 1703.

 

In the end we set a user software restriction policy to prevent apps running. That way it could be easily assigned to exam\controlled assessment accounts, as well as turned off/on as required.

 

Disallow access to:

%programfiles%\WindowsApps\

%systemroot%\systemapps\

 

Allow acceses to:

%systemroot%\systemapps\Microsoft.LockApp_cw5n1h2txyewy

%systemroot%\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy

%systemroot%\systemapps\ShellExperienceHost_cw5n1h2txyewy

 

(Otherwise the Lock Screen and Start Menu won't work!).

[gsk]

We had a similar issues with the Start Menu and the idiosyncrasies of AppLocker on 1703.

 

In the end we set a user software restriction policy to prevent apps running. That way it could be easily assigned to exam\controlled assessment accounts, as well as turned off/on as required.

 

Disallow access to:

%programfiles%\WindowsApps\

%systemroot%\systemapps\

 

Allow acceses to:

%systemroot%\systemapps\Microsoft.LockApp_cw5n1h2txyewy

%systemroot%\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy

%systemroot%\systemapps\ShellExperienceHost_cw5n1h2txyewy

 

(Otherwise the Lock Screen and Start Menu won't work!).

Does this stop the icons appearing or just prevent them from running? Both would be ideal but the former would be fine.

[Warwick_Tech]

Bringing this thread back from the dead I've noticed some wierd results using applocker on versions higher than 1607 -

 

Where it used to not show the icons of blocked apps, now it does, and some apps like 'Print 3D' under windows accessories show whatever I do -

 

There's also wierd bugs; new apps like 'Video editor' not being visible for students, and even the 'create' button being replaced by a spinning 'refresh' icon in photos.

 

Has anyone discovered the reason for these changes since 1607? I'm ready to deploy 1803 this summer but the lack of a video editor and a messy start menu is causing concern amongst the IT crowd.

[Arthur]

In the end we set a user software restriction policy to prevent apps running. That way it could be easily assigned to exam\controlled assessment accounts, as well as turned off/on as required.

 

Disallow access to:

%programfiles%\WindowsApps\

%systemroot%\systemapps\

 

Allow access to:

%systemroot%\systemapps\Microsoft.LockApp_cw5n1h2txyewy

%systemroot%\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy

%systemroot%\systemapps\ShellExperienceHost_cw5n1h2txyewy

 

(Otherwise the Lock Screen and Start Menu won't work!).

 

It's worth mentioning that in 19H1 (1903) Microsoft have moved the Start Menu into its own process so your SRP rules will stop it from working after you upgrade.

 

Windows 10 19H1 update to improve Start Menu reliability

 

If you frequently check Task Manager, you may have noticed a process named “Windows Shell Experience Host”. Windows Shell Experience Host is a process which handles graphical elements of the key features like the Start menu, taskbar transparency, flyouts, and so on.

 

The Start Menu also uses Windows Shell Experience Host to handle its graphical interface in various situations. In Windows 10 19H1, the Start Menu is no longer hosted by Windows Shell Experience Host, instead, it uses its own process, called StartMenuExperienceHost.

 

Microsoft’s decision to separate Start Menu into its own process is a big deal as it could improve the experience and simplify the debugging. This change should also improve the launch time and Start will no longer suspend.

 

Microsoft says it has seen noticeable improvements in the reliability of the Start after implementing the change and the company plans to roll it out to everyone with Windows 10’s Spring 2019 update.