Configure Start Pins group policy settin (Windows 11 25H2)

[toffee_paul]

Anyone else having an issue with the 'Configure Start Pins' setting? 

User Configuration > Administrative Templates > Start Menu and Taskbar > Configure Start Pins

 

I've followed instructions here

https://learn.microsoft.com/en-us/windows/configuration/start/policy-settings?tabs=start&pivots=windows-11#footnote24H2

and here

https://learn.microsoft.com/en-us/windows/configuration/start/layout?tabs=intune-10%2Cgpo-11&pivots=windows-11

 

but it doesn't work and pressing the Start button doesn't show the start menu.

 

The Application event log shows this:

 

Faulting application name: StartMenuExperienceHost.exe, version: 10.0.26100.5074, time stamp: 0xb9d79793
Faulting module name: StartMenu.dll, version: 2125.21001.0.0, time stamp: 0x688955cc
Exception code: 0xc000027b
Fault offset: 0x0000000000111b11
Faulting process id: 0x4D74
Faulting application start time: 0x1DC386E75B27ED3
Faulting application path: C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
Faulting module path: C:\WINDOWS\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy\StartMenu.dll
Report Id: 6ac99f4d-39d9-47a2-869f-47cea6da11f4
Faulting package full name: Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy
Faulting package-relative application ID: App

 

 

An entry like the above is logged every time the Start button is pressed.

 

Here's the JSON file contents:

 

{
  "applyOnce":false,
  "pinnedList": [
    { "packagedAppId": "Microsoft.WindowsCalculator_8wekyb3d8bbwe!App" }
    ]
}

 

As you can see, the JSON is as basic as they come, just pinning the Calculator app while testing.

I've tried pushing this out to to a test machine using Group Policy and also tested on my own machine using the Local Group Policy Editor, same result.

 

Any ideas?

 

[bacsom]

I have the same problem. I hope somebody will be able to help.

[highsky]

Using the latest Admx for this? 

 

With 24H2 expiring October 27 any reason to be working on an new version that adds only 1 year extra EOL?

 

With 24H2 we use intune for this, haven't tested with the fresh version.

 

 

[bacsom]

Yes, I updated the files on the server from the package "Windows 11 Sep 2025 Update (25H2)". Windows 11 is also on 25H2. The start menu comes back as soon as I deactivate the setting in the GPO.

[toffee_paul]

Anyone had any luck with this yet?

[DaftPunk]

We are also seeing the exact same issue. I was shocked that MS finally added the ability to do this in GPO using later 24H2 versions and 25H2 versions of Windows 11 (finally!) but ofcourse it doesn't work.

Start menu will not open, same Event Viewer errors as already reported.

We are using MDT to deploy Windows 11 25H2 (10.0.26200.6899) and using GPO.

Edited October 22, 2025 by gileseadon1

[ADMaster]

I have a related but different issue.  

 

I use PowerShell to set my start pins as part of OSD.  It has worked fine for the last several versions.  

 

Here is a snip from my code

 

$json = '{"pinnedList":[{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk"},{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},{"packagedAppId":"Microsoft.ScreenSketch_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\VideoLAN\\VLC media player.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Configuration Manager\\Configuration Manager\\Software Center.lnk"},{"packagedAppId":"Microsoft.CompanyPortal_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\lenovo\\System Update.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Dell\\Command Update\\Dell Command Update.lnk"},{"packagedAppId":"E046963F.LenovoSettingsforEnterprise_k1h2ywk1493x8!App"}]}'

if (!(Test-Path "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start")){

New-Item -Path "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start"

}
New-itemproperty "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start"  -Name ConfigureStartPins  -Value $json -PropertyType String -Force

 

On 24H2 and lower this would apply as the default start layout but not effect user changes later on.  

 

Now I've updated my machine to 25H2 my own pins keep disappearing.

 

This was one of the first posts I found when starting to look into it this afternoon.  I suspect I need to update my json with the apply once true field.  

 

I'll report back when I've had a chance to test, but I think you have pointed me in the right direction.  

 

 

  

 

[toffee_paul]

Yeah could just be that you need to change your $json to

$json = '{"applyOnce":true,"pinnedList":[{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk"},{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},{"packagedAppId":"Microsoft.ScreenSketch_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\VideoLAN\\VLC media player.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Configuration Manager\\Configuration Manager\\Software Center.lnk"},{"packagedAppId":"Microsoft.CompanyPortal_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\lenovo\\System Update.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Dell\\Command Update\\Dell Command Update.lnk"},{"packagedAppId":"E046963F.LenovoSettingsforEnterprise_k1h2ywk1493x8!App"}]}'

 

Your alternative way of populating the ConfigureStartPins group policy setting has me thinking. I might try loading it directly into the registry and see what happens, at least until Microsoft get round to fixing the problem.

[ADMaster]

That was something I found on a blog a few years ago.  I don't think MS had a GPO back then, they wanted it all via Intune.  

 

This was the trick to set the policy once for default start menu during OSD.  

 

I never wanted to set it via GPO / Intune because I wanted users to be allowed to change it, just get my cleaned up defaults.  

 

I rolled 25H2 out to a test group last week, no complaints on the start menu yet, but maybe they didn't have additional pins.  Most people live in the browser.  

[toffee_paul]

Our reason for doing it here is to stop students getting distracted and opening some random app up.  This was so much easier with Win10, and even that was a pain at times.

[ADMaster]

So I'm getting back to this today.  

1.  What do you have in the GPO? the intune / CSP method are both json.  The GPO method recently support is a path to the JSON file.  

Do you have a path and is it reachable?

 

I just configured the device version of this policy on my local GPO, not had any issues yet.  Also added the apply once as previously discussed.  

 

2. I found the version information I was looking for.  It is in the what's new in 25H2 article for IP pros.  

The task bar has a pin generation feature to allow you to repin an item based on its version.  This is what I was mixing up with the apply once key.  

https://learn.microsoft.com/en-us/windows/configuration/taskbar/pinned-apps?tabs=intune&pivots=windows-11#pingeneration

 

 

The reg key I shared appears to be a direct way of using the CSP option.  

 

I still need to do some testing , what happens if this GPO gets deployed to a machine that is not updated yet.  Will that break the start menu, or it just won't apply?

 

 

 

 

 

[ADMaster]

Ok I've broken my start menu and fixed it  a few times today.  Here is what I know so far.

 

The GPO for device level json works

The GPO for users level json breaks the start menu as you describe.  

 

The reg key I gave you does not appear to like the apply once 

 

I got pulled away to work on other tickets so can't be 100% sure, but I'm thinking when I had the apply once value it just ignored the whole thing.  

 

 

[hiattech]

I have been trying to work with this today. I also discovered that setting it under the user configuration broke it immediately. I didn't even have to log out. My start menu would just stop working. However, when I applied it to the Computer Configuration, it just doesn't apply the settings. I logged into a new user and the Start pins are whatever Microsoft thinks they should be instead of the layout I set it to. I originally had the json file in a network location which all users should have access to. I moved this to a local folder and logged in with a new user again and the same thing happened. It ignored my json file. It does not have the Apply Once option.

 

@toffee_paul, were you able to make the registry option work?

Edited November 6, 2025 by hiattech

[ctrl_alt_end]

I have been having this issue as well. I haven't found a way to get it to work.

 

One thing I did notice, was if I made my test user a local admin, the start menu does not crash. Of course that isn't very helpful outside of testing. 

[ADMaster]

I tested this earlier in the week.  I was not able to get the device level GPO to work. I'm thinking I had multiple / conflicting settings when I tested the first time.  

 

I've simply added the apply once to my json and it appears to be working.  My own start menu hasn't reverted on me yet.  

 

Here is my script again.  You can also set this with GP Registry Preferences 

 

$json = '{"applyOnce":true,"pinnedList":[{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Google Chrome.lnk"},{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},{"packagedAppId":"Microsoft.ScreenSketch_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\VideoLAN\\VLC media player.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Microsoft Configuration Manager\\Configuration Manager\\Software Center.lnk"},{"packagedAppId":"Microsoft.CompanyPortal_8wekyb3d8bbwe!App"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\lenovo\\System Update.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Dell\\Command Update\\Dell Command Update.lnk"},{"packagedAppId":"E046963F.LenovoSettingsforEnterprise_k1h2ywk1493x8!App"}]}'

if (!(Test-Path "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start")) {

    New-Item -Path "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start"
}
New-itemproperty "HKLM:\SOFTWARE\Microsoft\PolicyManager\current\device\Start"  -Name ConfigureStartPins  -Value $json -PropertyType String -Force

 

 

[2097]

Hi just about to start configuring ours.

 

I heard using the Start2.bin and Settings.dat file and copying that over to the default user profile works ok ( deployed via SCCM during OS install )

 

Hows the Powershell script above working ?

 

 

[Squuiid]

Mid of January 2026 now and still not able to get this to work using a GPO and Windows 11 Pro 25H2. Incredibly frustrating. As others have stated, the GPO for device level json does nothing, and the GPO for users level json breaks the Start menu and stops it from showing up when clicked.

Has anyone made any progress? Would be happy even if it just applied once to each profile but can't make anything work unfortunately.

[2097]

Squuiid , i managed to get it working the following way , It was the only way that worked for me on the latest version of windows 11.

 

In GP i have it set to copy over the startmenu file on each login

 

Source file(s)	\\DOMAIN\NETLOGON\StartLayoutWindows11\start2.bin
Destination file	%LocalAppData%\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\LocalState\start2.bin

[Squuiid]

@2097 thanks. Yeah, that's what I ended up having to do. Not a clean solution really as it could break in future, but for now, until Microsoft fixes their stuff(!), it works. Thank you.