Jump to content

Recommended Posts

Posted (edited)

This is becoming a show stopper for us on LTSB.

 

We have a LTSB and an Enterprise build next to each other.

We have a test user who has student permissions, folder directs etc. the only thing it doesnt have is the roaming profile or mandatory profile therefore it creates a local profile.

Both machines are in the same OU in AD getting the same policies.

 

When test user logs into the LTSB OS, a folder called TILEDATALAYER in APPDATA\LOCAL is created. Once the user has fully logged on, we did a test to log straight back off. During logoff, everything in the local profile deletes barring the TILEDATALAYER. If we try to do anything with this profile like delete or rename we get an error that states the file is in use, so when this test user logs back in a $user.domain profile is created. Only when the machine is restarted does the TILEDATALAYER actually become unlocked and then you can delete it.

 

Now, on the Enterprise build (14332), everything works as it should, no TILEDATALAYER is created and the local profile is removed at log off as expected... the only problem with Enterprise, is the bloody bloatware thought i think a Startmenu layout configured to be pushed out via GP might fix this.

 

UPDATE:

 

The test user has been on the Enterprise build for about 10 mins, ive logged it off however it took a while to log out as it got stuck on the SEARCHES folder. It eventually logged off and the local profile was removed.

Edited by timbo343
Posted

Why on earth is all of the bloat in 'Enterprise' - it should be rubbish free!

 

I'm going to muck around with some W10 images over half term but sorry I can't actually do anything other than feel for you on this issue. Does the user do it on LTSB with no GP applied?

Posted
Why on earth is all of the bloat in 'Enterprise' - it should be rubbish free!

 

I'm going to muck around with some W10 images over half term but sorry I can't actually do anything other than feel for you on this issue. Does the user do it on LTSB with no GP applied?

 

Yes it doesnt matter if there is GP applied or not. Only local accounts work the way they should.

 

On further testing, an up to date version of LTSB with the latest updates still has problems. The latest version of education / enterprise works fine as expected

 

We have decided to go with education or enterprise. If MS bring out an updated LTSB version that contains kb3147458 then we will move over to it, until then we are giving it a wide berth.

 

Yes we have to mess around with apps but Group Policy can help us here. We image once a year anyway.

Posted
@timbo343 I'm using delprof2 on a startup script to bin these tile datalayer folders. I was running side by side enterprise LTSB & Education side by side and i was unable to get rid of ALL the bloat. I was left with store & Xbox that i just couldn't get rid of. Im pressing on with LTSB using delprof2 to flush the profile folders each day until this issue is fixed
Posted
@timbo343 I'm using delprof2 on a startup script to bin these tile datalayer folders. I was running side by side enterprise LTSB & Education side by side and i was unable to get rid of ALL the bloat. I was left with store & Xbox that i just couldn't get rid of. Im pressing on with LTSB using delprof2 to flush the profile folders each day until this issue is fixed

 

Heres win10 education with all bloatware removed. Just need to disable settings now. Its only taken an hour and documenting it all.

1464365762389.jpg

Posted
Heres win10 education with all bloatware removed. Just need to disable settings now. Its only taken an hour and documenting it all.

 

ive managed something somewhere that makes settings not even open, if flashes up for a nano second then just disappears. I think its in GP somewhere

Posted
ive managed something somewhere that makes settings not even open, if flashes up for a nano second then just disappears. I think its in GP somewhere

 

If you can dig it out i'd be happy to have a look. I have renamed ImmersiveControlPanel Folder in C:\Windows. That disables settings but gives settings a stupid reference name like @{microsoft.immersivecontrol.....

Posted
ive managed something somewhere that makes settings not even open, if flashes up for a nano second then just disappears. I think its in GP somewhere

 

I've just thought, why don't i disable access to the folder for STAFF and PUPILS... that would be the logical option for now.

Posted
I've just thought, why don't i disable access to the folder for STAFF and PUPILS... that would be the logical option for now.

 

This is what happens when you prevent access to the immersivecontrolpanel folder...

1464374045691.jpg

Posted
Right, im going to spend the night going through GP.

 

just disabling policies now to work out which 1 results in this. Then I will copy and paste the policy contents for you

  • Thanks 1
Posted
Has anyone been able to remove "Contact Support" and "Microsoft Feedback" apps in Windows Enterprise? Installing Win10 in one of our IT rooms over half term as our test group. Fingers crossed!
Posted (edited)
Has anyone been able to remove "Contact Support" and "Microsoft Feedback" apps in Windows Enterprise? Installing Win10 in one of our IT rooms over half term as our test group. Fingers crossed!

 

Yup, have a look on winaero.com > Downloads > other > then do a search control+f for feedback. Download the zip files and run the .bat as administrator.

Edited by timbo343
  • Thanks 1
Posted
i've achieved the attached with a GPO. Ive not used any custom ADMs so its one/many of the stock GPOs

 

[ATTACH]37054[/ATTACH]

 

Ive just found another way, DENY access to the systemsettings.dll for staff and pupils. It flashes up but thats it.

Posted
Ive just found another way, DENY access to the systemsettings.dll for staff and pupils. It flashes up but thats it.

 

user setting --> admin templates --> control Panel --> prohibit access to control panel and PC settings

Posted
user setting --> admin templates --> control Panel --> prohibit access to control panel and PC settings

 

Oh, it must already be set in my GP. Im testing with local users at the moment, thank you.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...