gmonks

I used these guides when building my W10 Edu 1803 Image: Removing built in apps: This should spit out a new install.wim for you to then build your image on - import the .wim into MDT. https://gallery.technet.microsoft.com/Removing-Built-in-apps-65dc387b Creating and exporting Start Menu XML: https://blogs.technet.microsoft.com/deploymentguys/2016/03/07/windows-10-start-layout-customization/ Some useful GPOs below too: (1803 ADMX files here) Removal of first sign in user animation: Group Policy – Computer Configuration –Policies – Administrative Templates – System – Logon - Show first sign-in animation – Disabled Lock Screen: Group Policy – Computer Configuration –Policies – Administrative Templates – Control Panel – Personalization – Force a specific lock screen and logon image, prevent enabling lock screen camera, prevent changing lock screen and logon image Turn off Cortana: Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Search – Allow Cortana – Disabled Turn off Web search: Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Search – Don’t search the web or display web results in Search - Enabled Power Options: (This policy also sets the ‘Adjust plan brightness’ settings to default) Group Policy – Computer Configuration – Policies – Administrative Templates – System – Power Management - Sleep Settings: Specify the system sleep timeout (on battery): 0 Specify the system sleep timeout (plugged in): 0 Specify the system hibernate timeout (on battery): 0 Specify the system hibernate timeout (plugged in): 0 - Video and Display Settings: Turn off the display (on battery): 0 Turn off the display (plugged in): 0 Diagnostic data to MS Prevent device name being sent to MS in diagnostic data Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Data Collection and Preview Builds – Allow device name to be sent in Windows Diagnostic Data Level of diagnostic data to send to MS (Our level at 0 sends the bare minimum) Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Data Collection and Preview Builds – Allow telemetry – Enabled – 0 Security Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Data Collection and Preview Builds – Do not show feedback notifications - Enabled Lock machine after certain period: Computer Configuration – Policies – Windows Settings – Security Settings – Local Policies – Security options – Interactive Logon Machine Inactivity limit Remove people button from taskbar: User Configuration – Policies – Administrative Templates – Start Menu and taskbar – Remove the people bar from the taskbar – Enabled Disable Windows Store: Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Store – Turn off Store application – Enabled Confirm delete recycle bin: User Configuration – Administrative Templates – Windows Components – File Explorer – Display Confirmation dialogue when deleting files - Enabled Disable Notifications on lock screen User Configuration -Policies - Administrative Templates - Start Menu and Taskbar – Notifications – Turn off Toast Notifications on the lock screen - enabled Mapped Drives Error: (Local Change) · Open Regedit · HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Policies -> System · You will see ConsentPromptBehaviorAdmin, ConsentPromptBehaviorUser Add the following key - ADD DWORD (32bit), name it "EnableLinkedConnections". · Double click it and set the data to 1 · Reboot Disable Fast Boot: (Local Change) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power\HiberbootEnabled – set to 0 Disable Microsoft Edge Icon on Desktop: (Local Change) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\ DisableEdgeDesktopShortcutCreation – set 1 Hope that is of some help.

8 hours

Not me, I'm skipping 1809 altogether and will wait and see what 1903 is like.

Have had both Dell Vostro and Latitude Exxxx series. Latitude wins hands down, as I have found them to be more robust, better parts wise and lasting longer.

Thank you.

I was looking at the toolkit posted, (link) but I can't see anything about retention periods for staff emails (once they've left) nor staff documents (once they've left) is there any guidance on this?

Have you tried running the wsusutil reset command? If not, perhaps try the server cleanup wizard?

Thank you both.

Thank you, I had previously read this but wasn't sure if it was still what people were using as it was published in 2016 and pre-GDPR.

Hi guys, Hoping I can have some advice. What are the retention periods you use for retaining staff documents / emails once they've left? I can't seem to find any general guidance (I know DfE is working on some) and the LEA aren't able to give any either. Any advice would be greatly appreciated.

1803 ADMX files can be downloaded here: https://www.microsoft.com/en-us/download/details.aspx?id=56880 But, as Arthur said, 1809 ones not yet released.

Save the following as a VB script to obtain the service tag of a Dell PC:

VeryPC, Millgate, Dell to name a few.

Same here, and for TAs to use for intervention too.

You can turn off web search: Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Search – Don’t search the web or display web results in Search - Enabled Then to remove the search icon you can right click on it and go to Search - Hidden But not sure how to remove for every user... Disable Windows Store: Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Store – Turn off Store application – Enabled

Cortana is via Applocker to remove completely, but also, Group Policy – Computer Configuration – Policies – Administrative Templates – Windows Components – Search – Allow Cortana – Disabled

I use SConfig too via Powershell, its a little quicker. I share your frustration though!

I think if you remove the Windows Store app, that is the case, but not 100% sure.

I used this https://gallery.technet.microsoft.com/Removing-Built-in-apps-65dc387b and when running this command (.\removeapps.ps1 -pathtowim c:\10\install.wim -selectapps $true) it asks you one by one whether to remove x app.

We use year of entry, initial and surname. Example: this year they'll be 18JBloggs

Had 90+ of their thinbooks and 30+ of their flex desktops - all brilliant and hardly any issues. Ross is very good and Colin is great when Ross isn't around. Warranty support is excellent also!

I know I struggled to do it via a proxy so had to complete registration offsite without a proxy.

I've set the following registry key to disable it: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Power\HiberbootEnabled – set to 0

We've had a request from Wonde to access Pupil Asset (online MIS) so they can pull data for Teachers2Parents and SchoolMoney. Can I restrict what data Wonde have access to or will it just pull it all? Waiting for Wonde to respond at the moment.

Hi all, My desktop is running 1803 and my mapped drives are working as is the redirected desktop. To be fair to get my mapped drives working, I had to apply the following local fix: · Open Regedit · HKEY_LOCAL_MACHINE -> SOFTWARE -> Microsoft -> Windows -> CurrentVersion -> Policies -> System · You will see ConsentPromptBehaviorAdmin, ConsentPromptBehaviorUser Add the following key - ADD DWORD (32bit), name it "EnableLinkedConnections". · Double click it and set the data to 1 · Reboot But yesterday, on my 1803 reference image PC, not only are only 2 mapped drives showing, but the redirected desktop has stopped working. (Still okay on my desktop) Any ideas? The only thing I changed was I re-exported my start menu as an .xml. I have since removed that policy from the reference PC OU and deleted my profile and logged in again but no luck. Any ideas appreciated as its really frustrating!