DFE Laptop - clearing bloatware

[SkreeM1980]

Hi,

 

I'm trying to get DFE provided laptops rolled out for deployment with intune, which is all good so far, i've got a script to get hardware hash and get the computer named to match our asset stickers, it joins quite well. but the HP laptops we recieved are full of bloat ware, VPN clients, netflix links, all sorts. I really don't want to have to fully wipe these to get a clean install of windows. does anyone have any neat/useful scripts (powershell/bat or tools that can clear this stuff off?

 

Thanks In advance

[mdrabble]

I opted to clean install using A USB stick - when gets to the OOBE screen, I do Shift+F10 while laptop connected to network and run a script i precooked on the USB which install the licence key and installs all updates.

 

It then also then adds laptop to our intune which prompts for Office 365 details to add the device via the online method.

 

As we use SCCM, there is probably an easier and better way of doing it but the USB method works a treat and requires very little interaction.

[FragglePete]

We've also just rebuilding them with a clean Windows 10 build of a USB stick, do the whole InTune online to get the Hash, etc then White Glove them to get Office installed, Sophos and anything that's been requested, reseal and ready to go.

 

The only thing we're finding is the activation - they come apparently licensed with Windows 10 Pro Education and it doesn't reactive when rebuilt with the same - so, we're just using our MAK key first to put Windows 10 Education key on first, rebuild and then they re-activate after the rebuild.

 

Pete

[CHiLL]

We don't fully remove the apps, but run "systemreset.exe /cleanpc" at the OOBE stage. This removes the full apps from the machine, such as McAfee, VPN. It still leaves stub installers, tiles in the Start Menu for McAfee, VPN, Netflix, etc. We're OK with this, as users aren't local admins, so have limited access to install things.

 

Our process is:

1) At the OOBE screen, Shift+F10 to get the command prompt and use a script on a USB drive to get the hash.

2) Import the hash to Intune and wait 15 mint minutes for Intune to process it

3) During this 15 minutes, from the command prompt, run "systemreset.exe /cleanpc"

4) Windows will reset, with the apps removed

5) If this completes before the 15 minutes has passed, continue to wait (we've found this 15 minute window important, as if you proceed prematurely, before Intune has processed it...it messes up to Windows install)

6) Continue through the OOBE process and when joining the WiFi, it should automatically pick up your Intune policies

[FWBD]

We were wondering how to do this recently and the 'Fresh Start' option in Intune seems to do the trick for us. We're part way through migrating everything over to Intune so we're having to import devices onto Intune then wipe (Fresh Start) them again in order to clear anything off. At this point I'm just glad it works and saves me having to find the apps on the WSfB!