I’ve recently finished our companies Windows 10 reference image using MDT 2013 Update 1 to perform the build and capture. Then using Configuration Manager 2012 R2 SP1 CU1 + some hotfixes to deploy the reference image.
There have been a number of issues that I’ve had to find solutions for over the past 8 weeks not withstanding the numerous bugs in the RTM version of MDT 2013 Update 1.
These have included:
- Setting default file type associations
- Implementing custom branding such as lockscreen wallpaper and disabling the default hero wallpaper at login
- Removing selected Windows 10 modern applications
- Blocking Windows 10 modern applications that can’t be removed with App Locker
- Creating a default custom start menu layout
- Pinning default items to the taskbar
- Group Policy settings, in particular for Edge and Internet Explorer 11 Co-Existence
- USMT 10 implementation and data migration
Over the next week or two, I will be blogging on these topics and how I’ve implemented a solution to each.
Cheers
Damon
Advertisements
Looking forward to this series
Looking forward to this.
Damon- Have you published any of those articles yet?
I’ve published quite a few blogs now relating to this – with one last week. If you have something specific that your interested in knowing more about let me know and I will post a blog on it – assuming I have done work in that area.
I would like to know more about how you went about “Blocking Windows 10 modern applications that can’t be removed with App Locker”.
Hi Wes,
Sure thing, we use app locker policies via GPO to block some of the built in modern applications that can’t be removed from the wim file. As a secondary line of defence we also use application blacklisting with out Antivirus product. Take a look at http://ccmexec.com/2015/08/blocking-built-in-apps-in-windows-10-using-applocker/ and https://technet.microsoft.com/en-us/itpro/windows/manage/lock-down-windows-10-to-specific-apps These should provide the information you’re after.
Cheers
Damon
Hi Damon,
Thank you very much for sharing the information with me. Unfortunately, it only works on Enterprise and Education editions of Win10, we are using Professional.
Thank you for all your help!
Regards,
Wes