Posts Tagged ‘Windows 8’

I’ve implemented this solution based on information provided in the following blogs – credit to these people for posting this information.

http://www.deploymentresearch.com/Research/tabid/62/EntryId/97/PowerShell-wrapper-for-MDT-2012-Update-1-and-MDT-2013-Preview.aspx

http://blogs.technet.com/b/deploymentguys/archive/2013/10/21/removing-windows-8-1-built-in-applications.aspx

So I’ve moved on from my old process of corporate WIM image creation. I used to build up an image from a source ISO for a respective operating system using Hyper V, make my customisations, apply patches, then use MDT to do a sysprep and capture. I know, I know, there are probably numerous reasons why you shouldn’t do this. Well no more after watching Johan’s session from System Center Universe this year here 

The new process involves the more contemporary approach of doing a completely automated build and capture in one process with MDT performing any additional changes using scripts and additional steps. The session that Johan presented is in my view the best by far that I have seen.

One thing that wasn’t covered was how to remove the built in Windows 8.1 Modern Applications. In my case (like many others) we are deploying Windows 8.1 and do not wish to have all of these applications available.

Here is a solution you can implement which will remove these apps as part of your MDT or Configuration Manager Task Sequence. My example will be in MDT 2013.

Firstly create a new powershell script from the this blog, you can amend the script as required so that it only removes the applications that you want. Alternatively I have copied the script syntax into a word document here removemodernappsnew – please make sure that you edit this script in Powershell ISE to confirm that there are no syntax errors.

Copy the script to your MDT server sources folder.

Create a new MDT application and give it an appropriate name such as Remove Windows 8.1 Modern Applications

RemoveApps1

Use the following powershell wrapper command – credit to Johan who posted the install wrapper argument here

powershell.exe -Command “set-ExecutionPolicy Unrestricted -Force; cpi ‘%DEPLOYROOT%\Applications\Remove Windows 8.1 Modern Applications\RemoveWindows8Apps.ps1’ -destination c:\; c:\RemoveWindows8Apps.ps1; ri c:\*.ps1 -Force; set-ExecutionPolicy Restricted -Force”

Note you will need to adjust the path to your powershell script depending on how you setup the application in MDT.

RemoveApps3

Now just add an install application step in your existing MDT / Configuration Manager Task Sequence, its that easy.

RemoveApps2

If you implement a Suspend action in your MDT Task Sequence you can check that the apps have been removed.

RemoveApps4

RemoveApps5

Cheers

Damon

Advertisements

Recently I’ve had to tweak our Windows 8.1 Group Policy following the deployment of some Surface Pro’s. I noticed that a few people were attempting to link their personal Microsoft Accounts with these devices, in addition to this we had a call from someone who had uninstalled the modern Camera Modern App (somehow). I’ve stripped pretty much all of the modern apps out of our corporate image but this one was left installed for obvious reasons. Someone else had also reported that they had a weird Internet Explorer browser, looking at this they had done a search in the new interface which returned Bing Internet search results, these opened up in the modern Internet Explorer App and not the desktop version even though I have a policy configured to load the desktop version.

I already have the Windows Store turned off with Group Policy.

These are the new policies I’ve adjusted with some screen shots of the corresponding results:

1. Prevent Users from uninstalling modern applications from the Start menu

User  Configuration\Policies\Administrative Templates\Start Menu and Task Bar\Prevent Users from uninstalling applications from Start (Enabled)

2. Prevent Internet Search Results from showing

Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Don’t search the web or display web results in Search (Enabled)

2014-02-05_1

3. Block Microsoft Accounts from being used

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Users can’t add or log on with Microsoft accounts

2014-02-05_162057

2014-02-05_2

I’m using a WMI filter to target the Group Policy at Windows 8.1 Operating Systems only.

2014-02-05_3

Cheers

Damon