petben

Thanks, so what is the conclusion of this? Deleting those HKLM reg keys seems like a good thing if it actually removes those shortcuts. Changing permissions will affect logon scripts?

Any ideas how to remove the Powershell shortcuts in Win 10 file Explorer. - Open a folder - Select any file - File menu - 'Open Windows Powershell' - 'Open as administrator'....... if you like... I already have SRP setup but we cant block powershell.exe due to login scripts being required..

we are also getting the same behaviour despite 1803, all the updates etc. we need to involve MS in this, we can produce clear evidence from many different environments that this needs to be investigated by them..

I am just finding that the default apps GPO (an .xml file in 'Set a default associations configuration file') is not working. The machine doesn't seem to know anything about the Apps I am specifying until they are first run. e.g. The .xml dictates .jpg opens in Photos, but until Photos is run once by the user it doesn't seem to know it exists.. Any thoughts? I would have thought it is something to do with skipping most of the first run stuff at login - 'Just setting a few things up'....'Nearly there' etc..

I have added a few more reg keys as some of the sounds were still enabled. This will only leave the speech recognition sounds in place. Why MS don't make a GPO "Set Sound scheme - No Sounds"

Thanks, I didn't know you could do that. awesome..

Thanks, how do I paste the xml into my new policy?

Hello, anyone got any good methods to disable all windows 10 system sounds via GPO? I have tried reg file from web: Windows Registry Editor Version 5.00 HKEY_CURRENT_USER\AppEvents\Schemes\ @=".None" [HKEY_CURRENT_USER\AppEvents\Schemes\Names\.None] @="@mmres.dll,-801" this works but sets the scheme as 'No Sounds (modified)' and leaves a number of sounds still enabled. Thanks

I am still having issues with this IE Favorites sync, the policy is applied: Keep favorites in sync between Internet Explorer and Microsoft Edge - Enabled Prevent changes to Favorites on Microsoft Edge - Disabled The corresponding REG keys are present and being applied. I open IE and some favorites are there (from the users redirected folder), open Edge and favorites are not there, the grey box labelled 'Import Favorites' is there. any ideas? Thanks

We are having good success populating the reg key with the names of the required printers: HKCU\Printers\Connections This works fine for Office and Edge, but for Applications that seem to bring up the older style printing dialogue box, like IE, it doesn't work, those REG keys obviously aren't looked at.....any ideas? We need IE to be able to print.

Thanks dj-1701, a great answer. Edugeek is a great resource, issue sorted. Now it’s just the printer deployment problems, you would have thought after 20 years with windows and printers MS would have it flawless by now....

Thanks, not too bad, so you can specify parts of the top level items as well? What would I put in the reg value if I just wanted to allow System/Display, System/Sound and the whole of 'Ease of Access'.

Hello, I want staff to be able to use some Control Panel items (sound, printers etc) but I don't want them to have access to the Settings App. The GPO applicable is 'Disable Control Panel and Settings' (which will remove all access to both, so that's no good. Then there's the 'Settings Page Visibility' GPO where I can choose which Apps are visible in Settings, but that's a Machine policy, and I don't everything, or anything really, removed from Administrators. any ideas to restrict Settings but not Control Panel for staff? Thanks

We are installing using printuientry /ga script and occasionally getting: event 513 "Group Policy was unable to add per computer connection \\print1.sls.local\D7. Error code 0x57. This can occur if the name of the printer connection is incorrect, or if the print spooler cannot contact the print server." ideas??

The clients are win10 1803, the print server 2012 r2. I guess win10 would be happier with a 2016 print server...

We run a global add printuientry /ga command at startup, and get this erratic error, “no printers installed”. Log off/on and they’re there. Even if we don’t delete profiles, with 1500 user profiles potentially on each machine, this cant be a reliable solution? There will always be new users logging in who don’t have profiles. Win7 has been just fine for years. Tried GPO deployment (admittedly on win7) a couple of years ago, it was a nightmare of random missing printers. There must be something we can do that’s rock solid, it seems so simple.....

We have around 80 x 7 year old HP DC7800 desktops, a student has just found out that if you enter any bios password 5 times it will go into the bios. Brilliant. I know they’re old but like lots of schools, that’s what we’re stuck with for a bit. Latest bios update applied. Any ideas?

I’ve not got that policy, I’ll install the 1803 adm tomorrow but it will be not configured by default. Anything else you can think of? Is there a different method to dictating user the location of users favourites in edge? Thanks

I have enabled the Keep favorites in sync between Internet Explorer and Microsoft Edge policy. I’ve checked the reg key is there indicating this is enabled. It’s not working though, favourites are in IE but opening edge I just get the ‘import favs’ box which is greyed out as it controlled by the organisation. Is there more to it? What could block? Firewall and uac off.

We currently with win7 install network printers using printuientry scripts, old school but it works.... Now with a couple of rooms of win10 there are complaints of printers not installing. Log off/on they are there, but it’s too erratic. Tried GPO deployment a couple of years ago but it was a nightmare, ended up wiping nearly all the machines. now domain controllers are 2016, print server 2012r2, maybe GPO better, it’s a big risk for staff confidence in our win10 deployment though if printing is erratic. It needs to be rock solid. Powershell? What’s the deal with printer deployment in win10?

Michael, I think that’s fixed it. The redirected desktop from netlogon has been changed to \\server and I can’t replciate the error now. Really appreciate the idea.

Hi Michael, I don't mind changing our folder redirection setup, can you please advise folders, paths and permissions of your working setup. Thanks

Hello this seems to be a known issue. If redirecting users desktops or documents (e.g. all students get redirected to \\domain\netlogon\desktop\student) then Office 2016 browse/open/save may not work. There is an MS article that talks about enabling office files or disabling Netbios over TCP/IP to fix this. I guess offline files is manageable for desktop, but documents probably not. Then what are the implications of disabling Netbios over TCP/IP? I bet some software uses it somewhere. https://support.microsoft.com/en-gb/help/2816253/known-issues-with-office-if-desktop-or-my-documents-is-redirected any experience of this or thoughts? Thanks

Thanks, I’ll be more selective. My next problem is the powershell command above doesn’t work to actually remove the provisioned apps. I’ve tried lots of varieties of the command, all that should work but I get unspecified error.

I am trying to install them by name for more control,why doesnt this work - unspecified error: Get-AppxProvisionedPackage -Online | where { $_.DisplayName -eq "Microsoft.BingWeather"} | Remove-AppxProvisionedPackage -Online