Sheridan

Its seems that if TPM is detected only PIN/USB is allowed - if you disable the TPM (in the bios) then you can specify to have a password (not pin) at boot. I know TPM is probably better but as we widely used truecrypt staff are familiar with the password on boot option.

Maybe I'm missing something but we have GPOs that set Enhanced PINs for Bitlocker, yet on a brand new business HP laptop (with TPM 2 chip) we only get the pin/usb/autmatically unlock options when enabling it. Ideally I'd like the password on boot option to unlock but it just won't appear - the GPO is being applied correctly. If it detects tpm does it disable this option?

Weirdly it seems to come and go - one in every 5 logins it appears. Very odd. Still, I'm worried that the Enhanced PIN option for Bitlocker isn't available anymore - on a brand new business laptop.

I've noticed that my deployed Tile layout (on a network share) has simply disappeared on a test 1709 - I could get the 1703's to display the basic set of Office apps/tools but 1709 shows nothing, just the start menu!

Just out of curiosity what would be your refresh policy on this? I proposed ipads for all staff here and SMT could just about manage the cost, but when I told them about replacing them every 3 years they nearly fainted!

Makes no sense - but they support edge! And you'd think that it would warn you when logging in. It works - just not all the apps appear.

Actually, scratch that - bizarrely when searching the VPP store logged in using Firefox the App doesn't appear, login using Chrome and it does? How odd is that!

What do you do when an app requested isn't available through the VPP Store? Even though its free and can be seen in the 'normal' itunes store I can't deploy it to a set of iPads - does this mean I then have to use Configurator to manually download the app with a different account and deploy it manually?

It looks like we'll have to bite the bullet and remove CSM in the next build. Shame as despite all the pro/con arguments for whether we should use it or not, it was a superbly supported bit of software and the admx templates were a lesson to MS in how to provide configuration tools to admins!

We did suspect CS initially but we had the same explorer hangs on non CS machines as well. Don’t forget that the start menu hanging goes way back to the first version of 10, which is one of the reasons we held back for a good while as MS rushed it out unfinished.

I gave that a go for a couple of tiles that pointed to mapped drives, but they still didn't appear. I've just got Office on there now, the whole tile thing has been a farce so as long as I can keep it like this it will do.

I'm guessing the GetHelp one isn't an appx package, as that doesn't appear and I can't remove it!

I think that's the ways I'll deal with it on our current builds - of course the app names change every build which doesn't help!

We still use Start Menu and Desktop redirection and that seems to work - but as we use WDS whats the best way to remove the apps? Problem is all of the W10's we've installed using CSM as it worked fine - would need re-imaging again.

Looks like I'll have to give our users a crappy W10 layout then. I've tried this so many times in the past and come to the conclusion that you can't add shortcuts to folders on the start layout, nor can you remove the default apps (xbox,calendar etc) apps from the Start menu whether its redirected or not. I wouldn't mind having the empty start tiles, but its the rubbish it adds in that I can't remove.

I started trying the XML start menu again with 1703 - same old problems for me, some icons appear, others don't Plus the crap you can't get rid of on the start menu like Xbox, Alarms and Clock etc that CSM dealt with so well.

Nooooooo!!!!

Ha, I love going into one of our 'old' W7 suites and seeing everything working nicely - untouched since they were imaged 3 years ago! And then going into the W10 suites to bash them into life.....

What worries me is I get the xml start menu working in 1703, and maybe 1709 and then it will break in a later version - this seems to be the trend. Printers deployed OK in 1607 initially but don't in 1703. When is Windows 11 due out then :-)

Our start menus are a mix of locally installed programs, and network links/applications so we use the redirection a lot - has always worked very well for us as we're regularly asked to put a shortcut on the students desktop/start menu for a single period, for things like surveys or tests.

The way we did it was to set a screen saver by group policy, and use the Policy setting 'Force specific screen saver' to point to %windir%\system32\rundll32.exe user32.dll,LockWorkStation With the screen saver timeout set to 20 minutes, and the 'Password protect the screen saver' policy setting it means the PC locks after 20 minutes. Works a treat.

I have considered dropping CSM, but it offers a lot more than MS for configuration. How did those of you who managed to get the start menu xml working deploy it?, locally copied or on a network share? I also seem to remember that redirected start menu's didn't work very well either, we redirect them to a share (one for staff and one for students) - this still works nicely with CSM but do you non-CSM users find it still works?

Just had another 2 - login, get the Welcome screen, then black screen with cursor - one of them was with a fresh profile as well.

This is where I find 10 so frustrating - we're doing things pretty much the same as you are probably. Yet we see a lot more problems! We use a clean image with the crap removed as our base image, deployed with WDS Updates - this is one of those variable ones, we see some machines working, others hang when accessing the updates. We've used GPPs for printers since 7 - worked beautifully until 10 - now its completely lucky dip whether you see a printer or not. We use a 2012 Printer server but that shouldn't make any difference really? Our first logins are around 30-60 seconds depending on the age of the machine, and then less than 10 after that. Assuming they don't see a black screen, or explorer hangs. After faffing about with the xml start menu for over a year I simply gave up and used CSM. 10 wasn't ready for release back in the day and it may have been patched up enough to work better now, but back in 1607 days it wasn't.

This was part of my justification for pushing 10 forwards - however when using W10 at home, on a single user device its generally Ok - offers nothing over 7 but hey ho. However in a work/deployment environment, its broken just about everything that worked smoothly in 7 - updates, printers, logins, start menus, deployed software and so on without actually bringing any tangible benefit. In fact, in most of the areas we've deployed 10 - the users haven't noticed (probably as we're using CSM) apart from the regular visits from a techie to sort out failed logins, missing printers, black screen, hung explorer etc!