TheRobins Posted March 24 Author Posted March 24 7 minutes ago, J-14P said: Trust me I have tried 😅 We don't have synced OneDrive, we're mostly on-prem still. As far as I understand the OneDrive apps requires C:\ drive access, which we don't allow. I think we also have a legacy GPO laying around blocking it for regular users. Worth checking your AV solution, Sophos will allow you to block running unknown exe files, or known exe's based on classification. I think most of them offer a form of app control which is built in.
TheRobins Posted March 24 Author Posted March 24 3 minutes ago, EssentialRug said: Anyone know if these settings are in Intune? 😀 1
TheRobins Posted March 24 Author Posted March 24 I have been importing updated ADMX templates these last few weeks, but would assume that InTune is updated by default without end user having to import the latest ADMX.
Olliedawg Posted March 24 Posted March 24 Oooo interesting - i'll have to update our ADMX, we're still running on 24H2
TheRobins Posted March 24 Author Posted March 24 2 minutes ago, Olliedawg said: Oooo interesting - i'll have to update our ADMX, we're still running on 24H2 I am not going to get a chance to test it on some of our 24h2 machines for a few days, but if you could try it be interesting to see if its enabled as the policy only came with the latest 25h2 ADMX templates. 1
Fazza Posted March 24 Posted March 24 3 minutes ago, TheRobins said: I am not going to get a chance to test it on some of our 24h2 machines for a few days, but if you could try it be interesting to see if its enabled as the policy only came with the latest 25h2 ADMX templates. I believe the GPO only works on W11 25h2 and above.
itskdog Posted March 24 Posted March 24 10 minutes ago, Fazza said: I believe the GPO only works on W11 25h2 and above. Yes, it's a 25H2 policy, and only for Enterprise/Education - it has no effect on Pro/ProEdu.
jthompson Posted March 24 Posted March 24 Has anyone determined whether the list offered in that template is sufficiently complete? My decrufting script for Win 11 (probably built for 23H2 at the time) list these: "*DevHome*" "*FeedbackHub*" "*GamingApp*" "*GetHelp*" "*Getstarted*" "*Microsoft3DViewer*" "*MicrosoftOfficeHub*" "*MixedReality*" "*News*" "*OneNote*" "*Outlook*" "*People*" "*PowerAutomateDesktop*" "*Skype*" "*Solitaire*" "*Todos*" "*Weather*" "*WindowsMaps*" "*Xbox*" "*YourPhone*" Of those, I don't think I'm seeing corresponding options in the Group Policy template for: "*DevHome*" "*GetHelp*" "*Getstarted*" "*Microsoft3DViewer*" "*MicrosoftOfficeHub*" "*MixedReality*" "*OneNote*" "*People*" "*PowerAutomateDesktop*" "*Skype*" "*WindowsMaps*" "*YourPhone*" Some of these might be dead already (Skype, 3D Viewer?). If I get time, I might compare the output of Get-AppxProvisionedPackage on vanilla 25H2 to the Group Policy list.
TheRobins Posted March 24 Author Posted March 24 This is the settings that I have picked. Remove Default Microsoft Store packages from the system. Enabled Removes Default Microsoft Store packages from the system. Feedback Hub Enabled Microsoft 365 Copilot Enabled Microsoft Clipchamp Enabled Microsoft Copilot Enabled Microsoft News Enabled Microsoft Photos ** Disabled Microsoft Solitaire Collection Enabled Microsoft Sticky Notes Disabled Microsoft Teams Enabled Microsoft To Do Enabled MSN Weather Enabled Outlook for Windows Enabled Paint Disabled Quick Assist Enabled Snipping Tool Disabled Windows Calculator Disabled Windows Camera ** Disabled Windows Media Player ** Disabled Windows Notepad ** Disabled Windows Sound Recorder Disabled Windows Terminal Enabled Xbox Gaming App Enabled Xbox Identity Provider * Enabled Xbox Speech To Text Overlay * Enabled Xbox TCUI * Enabled When now running get-appx I have this list, vanilla 25H2 Education latest updates. Obviously other apps installed as well. PS C:\WINDOWS\system32> Get-AppxProvisionedPackage -online DisplayName : AD2F1837.HPSystemInformation Version : 2025.910.723.0 Architecture : neutral ResourceId : ~ PackageName : AD2F1837.HPSystemInformation_2025.910.723.0_neutral_~_v10z8vjag6ke6 Regions : all DisplayName : aimgr Version : 0.20.42.0 Architecture : x64 ResourceId : PackageName : aimgr_0.20.42.0_x64__8wekyb3d8bbwe Regions : all DisplayName : AppUp.IntelArcSoftware Version : 26.4.2155.0 Architecture : x64 ResourceId : PackageName : AppUp.IntelArcSoftware_26.4.2155.0_x64__8j3eq9eme6ctt Regions : all DisplayName : Microsoft.ApplicationCompatibilityEnhancements Version : 1.2511.9.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.ApplicationCompatibilityEnhancements_1.2511.9.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.AV1VideoExtension Version : 2.0.7.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.AV1VideoExtension_2.0.7.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.AVCEncoderVideoExtension Version : 1.1.23.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.AVCEncoderVideoExtension_1.1.23.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.BingSearch Version : 2022.1.43.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.BingSearch_2022.1.43.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.DesktopAppInstaller Version : 2026.306.1850.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.DesktopAppInstaller_2026.306.1850.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.Edge.GameAssist Version : 1.0.3590.0 Architecture : x64 ResourceId : PackageName : Microsoft.Edge.GameAssist_1.0.3590.0_x64__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.GetHelp Version : 10.2409.33293.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.GetHelp_10.2409.33293.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.HEIFImageExtension Version : 1.2.30.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.HEIFImageExtension_1.2.30.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.HEVCVideoExtension Version : 2.4.43.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.HEVCVideoExtension_2.4.43.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.MicrosoftEdge.Stable Version : 146.0.3856.72 Architecture : neutral ResourceId : PackageName : Microsoft.MicrosoftEdge.Stable_146.0.3856.72_neutral__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.MicrosoftStickyNotes Version : 6.1.4.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.MicrosoftStickyNotes_6.1.4.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.MPEG2VideoExtension Version : 1.2.13.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.MPEG2VideoExtension_1.2.13.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.Office.ActionsServer Version : 16.0.19725.20170 Architecture : neutral ResourceId : PackageName : Microsoft.Office.ActionsServer_16.0.19725.20170_neutral__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.OfficePushNotificationUtility Version : 16.0.19725.20170 Architecture : neutral ResourceId : PackageName : Microsoft.OfficePushNotificationUtility_16.0.19725.20170_neutral__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.OneDriveSync Version : 26035.222.2.0 Architecture : neutral ResourceId : PackageName : Microsoft.OneDriveSync_26035.222.2.0_neutral__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.Paint Version : 11.2601.401.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.Paint_11.2601.401.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.PowerAutomateDesktop Version : 11.2602.145.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.PowerAutomateDesktop_11.2602.145.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.RawImageExtension Version : 2.5.7.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.ScreenSketch Version : 2022.2601.2.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.ScreenSketch_2022.2601.2.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.SecHealthUI Version : 1000.29510.1001.0 Architecture : x64 ResourceId : PackageName : Microsoft.SecHealthUI_1000.29510.1001.0_x64__8wekyb3d8bbwe Regions : all DisplayName : Microsoft.StorePurchaseApp Version : 22601.1401.1.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.StorePurchaseApp_22601.1401.1.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.VP9VideoExtensions Version : 1.2.12.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WebMediaExtensions Version : 2.1.8.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WebMediaExtensions_2.1.8.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WebpImageExtension Version : 1.2.14.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WebpImageExtension_1.2.14.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.Windows.DevHome Version : 0.1701.597.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.Windows.DevHome_0.1701.597.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.Windows.Photos Version : 2026.11020.20001.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.Windows.Photos_2026.11020.20001.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsAlarms Version : 2021.2512.0.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsAlarms_2021.2512.0.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsCalculator Version : 2021.2508.4.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsCalculator_2021.2508.4.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsCamera Version : 2022.2510.2.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsCamera_2022.2510.2.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsNotepad Version : 11.2512.26.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsNotepad_11.2512.26.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsSoundRecorder Version : 2021.2512.0.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsSoundRecorder_2021.2512.0.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.WindowsStore Version : 22602.1401.4.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.WindowsStore_22602.1401.4.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.XboxGamingOverlay Version : 7.326.2102.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.XboxGamingOverlay_7.326.2102.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.YourPhone Version : 1.26012.101.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.YourPhone_1.26012.101.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : Microsoft.ZuneMusic Version : 11.2601.11.0 Architecture : neutral ResourceId : ~ PackageName : Microsoft.ZuneMusic_11.2601.11.0_neutral_~_8wekyb3d8bbwe Regions : all DisplayName : MicrosoftCorporationII.WinAppRuntime.Main.1.8 Version : 8000.770.947.0 Architecture : x64 ResourceId : PackageName : MicrosoftCorporationII.WinAppRuntime.Main.1.8_8000.770.947.0_x64__8wekyb3d8bbwe Regions : all DisplayName : MicrosoftWindows.Client.WebExperience Version : 526.1202.40.0 Architecture : neutral ResourceId : ~ PackageName : MicrosoftWindows.Client.WebExperience_526.1202.40.0_neutral_~_cw5n1h2txyewy Regions : all DisplayName : MicrosoftWindows.CrossDevice Version : 1.26012.79.0 Architecture : neutral ResourceId : ~ PackageName : MicrosoftWindows.CrossDevice_1.26012.79.0_neutral_~_cw5n1h2txyewy Regions : all DisplayName : RealtekSemiconductorCorp.HPAudioControl Version : 2.53.364.0 Architecture : neutral ResourceId : ~ PackageName : RealtekSemiconductorCorp.HPAudioControl_2.53.364.0_neutral_~_dt26b99r8h8gj Regions : all DisplayName : VideoLAN.VLC Version : 3.2.1.0 Architecture : neutral ResourceId : ~ PackageName : VideoLAN.VLC_3.2.1.0_neutral_~_paz6r1rewnh0a Regions : all
MYK-IT Posted March 24 Posted March 24 For all the other (unwanted) Apps, probably still need to remove via Remediation Script for deployed W11 devices, or similar PS Script on the source WIM before initial deployment.
Olliedawg Posted March 24 Posted March 24 Is this a new one too? User Policy > Administrative Templates > Start menu & Taskbar > Configure Start Pins
TheRobins Posted March 24 Author Posted March 24 3 minutes ago, Olliedawg said: Is this a new one too? User Policy > Administrative Templates > Start menu & Taskbar > Configure Start Pins Certainly looks that way, Feb 26 https://learn.microsoft.com/en-us/windows/configuration/start/policy-settings?tabs=start&pivots=windows-11 But looks like it will support down to 24H2
Olliedawg Posted March 24 Posted March 24 2 minutes ago, TheRobins said: Certainly looks that way, Feb 26 https://learn.microsoft.com/en-us/windows/configuration/start/policy-settings?tabs=start&pivots=windows-11 But looks like it will support down to 24H2 About time! Maybe this can replace the start2.bin method
itskdog Posted March 24 Posted March 24 2 hours ago, jthompson said: Of those, I don't think I'm seeing corresponding options in the Group Policy template for: Some of these that I've located: GetHelp - Wouldn't recommend removing this as the old troubleshooters have been removed and added to this app in W11 MicrosoftOfficeHub - That's in the policy as Microsoft 365 Copilot MixedReality - Don't think this is pre-installed now People - That's part of the old Mail & Calendar app, I think, which is no more Skype - Not pre-installed these days 1
mitchell1981 Posted March 24 Posted March 24 Just to clarify, is Outlook for Windows the same as New Outlook? If I were to remove this would it prevent people switching to New Outlook? Or is something even more cut down than New Outlook?!
jthompson Posted March 24 Posted March 24 24 minutes ago, itskdog said: Some of these that I've located: GetHelp - Wouldn't recommend removing this as the old troubleshooters have been removed and added to this app in W11 MicrosoftOfficeHub - That's in the policy as Microsoft 365 Copilot MixedReality - Don't think this is pre-installed now People - That's part of the old Mail & Calendar app, I think, which is no more Skype - Not pre-installed these days I don't think GetHelp gets removed anyway, in fairness, even if the command is run. 1
J-14P Posted March 24 Posted March 24 35 minutes ago, Olliedawg said: About time! Maybe this can replace the start2.bin method I tried this, and couldn't get it to work.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now