JoeCav

I'm wondering if anyone else has managed to find a solution to this problem yet. In the Windows 10 start menu search you can enter anything, so for example:gpupdateservices.mscpowershellAnd it allows it to run the command. I have used all of the GPO's which seem like they would limit searching down but maybe someone knows of a registry fix or something else that can block the search box from running anything that isn't a Program File.Thanks

Oh that might be it, we're using 1607 Enterprise over here. I've got 1511 somewhere, I'll try image a computer with this version to confirm if this is the problem.

My policy is the same but it's not restricting it, just to confirm this policy blocks you from being able to type command lines into search (in the start menu)? like for example I can open the start menu on a student device and login type in cmd, powershell, gpupdate, etc.. and I get the option to run the command directly from there even though it's blocked elsewhere. Thanks so much for your help.

I've done a Packaged app Rules policy to Deny Everyone package name "Microsoft.Windows.Cortana", done a gpupdate and reboot and I'm still able to type "gpupdate" in search and it show up as run command, would you be able to share a screenshot of your policy?Thanks for your help and quick reply

KibosJ, don't suppose you can share your method for blocking search could you? sorry for bumping an old post but looking everywhere for this.

Hi Olly, Thanks for replying, I've already got this registry applied and that just gets rid of the search box on the taskbar, if you open the start menu and start typing you can still use the search feature

I'm trying to deploy out Windows 10 Enterprise and on my test PC I've been trying different policies all day to try and block showing system applications or commands in the search area. In the start menu if I type in "gpupdate" for example under best match it'll show gpupdate Run Command. The same for ipconfig, explorer, taskmgr, etc.. I don't want students to be able to do this, it should just search the installed applications and that's it. I've tried policies like: Remove search computer link Do not search programs & control panel items Remove search link from the start menu Search just apps in the apps view Any idea where the policy for what I want is or if it's a registry key. I've done things like removing Cortana, the searchbox along the taskbar, notfications, custom start menu, etc.. this is my last struggle for the start menu. If there's any other policies you think should be applied to a student PC in Windows 10 as well please suggest them, we're just looking to upgrade from 8.1 to 10 but seems that 10 needs locking down a lot more than 8 did. Thank you.

I've managed to fix it, for those with the same problem and want to know how to sort it go to your Deployment Share folder\Control\Your Task Sequence Folder, make a backup of Unattend.xml then edit it, remove the values in and then go into the Deployment Workbench, Task Sequences, Right Click & Properties on your Task Sequence, OS Info tab, Edit Unattend.xml and locate Unattend -> Components -> Specialize -> amd64_Microsoft-Windows-UnattendedJoin_neutral and in both Identification and Credentials re-enter your domain password. You will get this error if you edited your Unattend.xml file directly rather than through the workbench and entered your passwords in plain text (if they have special characters).

Hi, I'm having a problem with MDT where I'm trying to allow user input to set the computer name, I've currently got the wizard automated except from the "SkipComputerName" so I'm able to see the prompt to enter a computer name. I can enter the name fine and it will continue but after joining the domain the computer name renames itself to "CAVENDI-??????", completely ignoring the name previously typed into the wizard. I've tried setting OSDComputerName / ComputerName to something to see if it would set the computer name but again it would just go to CAVENDI-?????? after joining domain. Any ideas? Thanks.