Windows 10 - Pre-Deployment issues!

[mike86]

I'm looking to deploy windows 10 edu to a small IT suite over the Easter Break and just going through creating the GPOs etc. I've managed to get everything working apart from a few little niggles. I've looked on here and done the usual googling but can't get any definitive answers. So here's hoping.

 

1. I've used app locker to block cortana however the first click on the start menu, everything is greyed out, second click everything is back! The reason I have this blocked is that I don't want students to be able to browse unc paths / run commands. Is there a better way of doing this? all searches have thrown up disable run from start menu, this stops the run command but not unc browsing / running commands from start.

 

2. How are you going about removing quick access / frequent folders from file explorer? I've tried the reg entries in from post a post on here but no dice.

 

Thanks

[jthompson]

1. I've used app locker to block cortana however the first click on the start menu, everything is greyed out, second click everything is back! The reason I have this blocked is that I don't want students to be able to browse unc paths / run commands. Is there a better way of doing this? all searches have thrown up disable run from start menu, this stops the run command but not unc browsing / running commands from start.

 

We've been working on this exact problem today, so thought I'd follow up with what we've arrived at.

 

We too have blocked the Cortana app for students, to prevent any search functionality in the Start menu. To workaround the problem of the Start menu initially being greyed out, we've added a logon script which just sends a couple of Ctrl+Esc keypresses (the Start menu keyboard shortcut) after a short delay. After logging in, students will see the Start menu blink up and down quickly, but it's then essentially ready to use when they first click it.

 

Something like this in VBS file:

Set WshShell=WScript.CreateObject("WScript.Shell")
WScript.Sleep 2000
WshShell.SendKeys "^{ESC}"
WScript.Sleep 100
WshShell.SendKeys "^{ESC}"

 

The sleep values are needed as the keypresses are ineffectual if they're given too early. Adjust them up or down to balance them not working/interfering with actual user input.

[mavhc]

"I'm installing Windows 10, but removing any new features they added to make things better"

[mike86]

We've been working on this exact problem today, so thought I'd follow up with what we've arrived at.

 

We too have blocked the Cortana app for students, to prevent any search functionality in the Start menu. To workaround the problem of the Start menu initially being greyed out, we've added a logon script which just sends a couple of Ctrl+Esc keypresses (the Start menu keyboard shortcut) after a short delay. After logging in, students will see the Start menu blink up and down quickly, but it's then essentially ready to use when they first click it.

 

Something like this in VBS file:

Set WshShell=WScript.CreateObject("WScript.Shell")
WScript.Sleep 2000
WshShell.SendKeys "^{ESC}"
WScript.Sleep 100
WshShell.SendKeys "^{ESC}"

 

The sleep values are needed as the keypresses are ineffectual if they're given too early. Adjust them up or down to balance them not working/interfering with actual user input.

 

Good shout! Thanks for this. We went with classic shell in the end, however I'll keep this in mind for the future. Thanks

[mike86]

"I'm installing Windows 10, but removing any new features they added to make things better"

 

Me too & I'm skinning it to look like Windows ME!!

[mavhc]

How forward looking of you, embrace the future already. The kids will assume your computers are old are boring not new and exciting. Plus things like recent files and recent dirs are really good.

[Ageekin10]

@mike86

 

With regards to Quick Access, Im not sure how you go about removeing it but you can set a REG_DWORD to ensure when you open explorer it goes to this PC instead of the quick access.

 

make a Group Policy that apply to the users with the following Registry setting

 

Action: Update

Hive: HKEY_Current_User

Key Path: Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced

Name: LaunchTo

Value Type: Reg_DWord

Value Data:00000001

Base: hex

Edited April 5, 2018 by Ageekin10

[jthompson]

"I'm installing Windows 10, but removing any new features they added to make things better"

 

"I'm installing Windows 10, but removing any new features they added, to make things better"

 

FTFY

[mavhc]

Just reminds me of people who used to disable right click "for security", nope, you're fixing the wrong thing.

 

Really the only new thing that's annoying is how it pre-installs a load of metro apps, the new features are almost all improvements

[chris11256]

We don't completely disable Cortana, but turn it off with GPO as many pupils & staff found the login popup annoying. Most of the modern apps are removed during the task sequence via a power shell script. Edited April 7, 2018 by chris11256

[jthompson]

I'd rather not have it surfacing the contents of system32, etc. I don't really want to unpick reports of students doing stuff in a command prompt, just because the Start menu gives them a route to run ping, or gpupdate.

[FishCustard]

Just reminds me of people who used to disable right click "for security", nope, you're fixing the wrong thing.

Agreed. If a user is a regular, standard user, and your file permissions on things like shared folders are set correctly, there's no risk.

 

The only reason I'd get rid of Cortana is that it might confuse some staff who would wonder why their computers are talking to them. I'm going to see how it goes before doing that if necessary.

[mavhc]

"I have to block cmd because it scares the teachers if the pupils use it"