Scorpio

Cheers...Yes ive done this, this hides them in the Control panel also, we wanted a cleaner fix for this as we have admins on site who are not as clued up and it will look empty to them. Surely there is a way of doing this by GPO or reg entry that works, ive tried the ones that did work but dont seem to work now on newer versions, why is MS creating a game of cat and mouse for us... grrrr.

Do you mean, remove common program folders GPO ? If so this removes all user profile shortcuts and removes from desktop so not ideal. Anyone else? Cheers

Ive tried this it doesnt work anymore when ive tried.

Hi all how are you guys hiding or removing your Administrative Tools, all the GPOs, GPP/start menu and Regedits dont work with the new 1703 to hide them so theres only two options: Change Permissions on the folder - Leave the Folder in the users start menu but Empty Hide the folder - Hides in control panel too for admins (Not a massive deal but can catch some unsuspecting admins out) also not fully secure. Ideally want to leave it intact and just hide in the menu so admins can use in control panel as control panel is blocked for standard users, seems the start menu and control panel icons are linked. Any pointers would be great, also it would be good to see how you guys handle all the other folders too such as the PowerShell and System Tools etc. Cheers S

Thanks, any examples of code / Scripts / GPOs / Regs ? I think its easier to use the Ribbon Disabler but dont know the command line options as it gets rid of the quick access menu too... Unless all these can be removed using Reg / GPP.

Will have to try, this is smaller school that dont have images so need to have ways of doing this for the Default user on computers out of the box with Windows 10 Pro on. We have it sorted on users that already have profiles using a theme file and the Theme switcher, but just need to work out how to do it for default user. Cheers

Guys How are you managing the ribbon? Does anyone use the tools Ribbons Disabler 3 or OldNewExplorer. Also there is a method i've seen that can disable parts of the ribbon, the problem is its just so full of buttons its a minefield to go through them all, does anyone have a script to remove most of what is not required. Also i've tried Ribbon Disabler 3 and it says you can use command line but cannot see them anywhere, has anyone used this in a script and had any issues? I assume this may cause issues when windows is patched, not a problem if it runs at login i suppose. Any pointers would be great as its a pain to remove or tweak. Cheers Scorpz

Ive been using this but in GPP Registry, but is there a more elegant way? Windows Registry Editor Version 5.00 ; Remove Desktop From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}] ; Remove Documents From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}] ; Remove Downloads From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{374DE290-123F-4565-9164-39C4925E467B}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{374DE290-123F-4565-9164-39C4925E467B}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}] ; Remove Music From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}] ; Remove Pictures From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}] ; Remove Videos From This PC [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A0953C92-50DC-43bf-BE83-3742FED03C9C}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A0953C92-50DC-43bf-BE83-3742FED03C9C}] [-HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}]

I know there is several ways to do this but which is the best for the latest version of Windows 10. I see a new key called "AllowedEnumeration" as per this link below, where it hides everything then you whitelist what you need by entering the GUIDs, i cant see anything documented anywhere else about this key, but ive added it and all icons etc disappear. http://www.winhelponline.com/blog/show-hide-shell-folder-namespace-windows-10/ How do you hide the 6 Icons in Explorer and Navigation Pane, ie Desktop, Documents Music etc What is the best and cleanest way. Cheers Scorpz

Ive found a new cleaner way: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer Create a DWORD value named HubMode and set its value data to 1 Scorpz

Yes that would be great thanks. What i have done is set the themes then copied into the folder on C:\ and use that ThemeSwitcher app as a logon script which works for already logged in users with profiles and I just get it to change the colours, funnily enough you can still use the GPO to stop theme change which stops users picking another and the little app still changes the theme, the only thing you cant enable is any GPO that prevents changesyou want the theme to change such as prevent change of colour GPO, ive had to leave that off, so users can change the colours but when they log back in the theme reapply and changes it back... Next is I want to apply to any local or new users which is why im trying what you originally said, so trying to get that working.... Ive read dropping an oem.theme somewhere the computer (Maybe the resources/themes folder and should load this first when a new user logs in and used by dell and acer etc, i havent tried this yet or found much info on it.

I cant get it working for the default user using the InstallTheme registry entry, it doesnt seem to work even for new users, are you saying if this entry is in and the theme exists if a new profile is loaded on that computer it should use the theme specified ? Can you check your setup / Config, would be greatly appreciate as im pulling my hair out here. Cheers.

Ive looked there is no such Key, looks to be this one. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes Also looks like you cannot prevent the users changing the theme either as it wont apply the change, so users can change the theme afterwards. I cant believe they have made it so difficult to brand your Windows with your Corporate / School Colours.

Still trying to get this to work machine wide, as the login screen seems to remember the colour from the last logged on user, so trying to use loopback GPO to apply user settings to the machine. Also is this path correct ? HKLM\DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes

If it helps anyone i found this which changes the theme at command line using a little tool: https://winaero.com/comment.php?comment.news.209

Ok, just found it can be taken from the User Profile who has amended the theme, then you can change the theme like an INI file: https://msdn.microsoft.com/en-us/library/windows/desktop/bb773190(v=vs.85).aspx Did you apply your background here or via GPO, does one write over the other? Going to have a play with them now, but any things to watch out for when amending the theme ? So the reg script only works on a new computer or users that are new on that computer ? Finally you copy the them and an lnk file pointing to the theme in the users startup, then the script runs opening it and selecting it then closing and then deleting the startup shortcut ? Cheers.

Ok thanks will play around with this, how are you setting your Theme then exporting the them file, i just see a save for sharing and saves it as a .deskthemepack file and not a .theme I was hoping we could tweak the theme file then export and give it a name like School Theme, so when it imports we know its the right one. Any ideas or points, cheers.

Thanks will take a look. So what does the script do and what is that needed for, i assume to select the theme?

Just had a read around, not sure custom themes can be used as the Microsoft ones are Signed and the custom one wont so may not import by whatever means? Can anyone confirm this, or anyone who has used custom themes and used GPO or REG to import them ? Cheers

Whats files are they and which GPOs / Reg keys di you use and does the time apply for all on the computer ? Thanks.

Spent a lot of the day on this again and playing with other Registry keys to some in the DWM Key both: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\DWM Why is this so difficult to do.... surely there is a way to do, how have you guys adjusted your corporate / school colours? Cheers S

Im going to open a fresh one for this, I cant believe there isnt a solution to this that I have found, ive spent all day on this and done some research and not found anything that will work. You can change the colour manually within windows and it works, but I cannot see how to automate this with a GPO or script etc. From using process monitor when the accent is changed in windows the values are added here under the current users SID HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\SID\ I cant see of any other way to do this globally for the Machine, how have you guys made the logon screen a particular colour along with the Start bar etc. Surely this must be do-able. Thanks Scorpz

Anyone find out how to do this ? I know its an old thread...

How do you get Education Plus ? Thanks

Well Office 365 Education comes with Exchange Online part ? You then add the ProPlus Onto this to get Offline Installers for Office Suite. I assume this is the Education Plus is ? So in essence Exchange online needs User licence and these Device licenses are obvious device licenses, so i assume you just install the same version on all the PCs wether SDtaff or Pupils are logging in, except that staff Will utilise Outlook maybe ?