Windows 11 22H2 production setup!
Windows 11 22H2 production setup!
I recently started to deploy windows 11 and to my chagrin found many applications that didn't align to the business needs such as recommended apps, tiktok, instagram etc, as well as other apps like Microsoft Teams, and Onedrive. So this is a short blog and shout out to the resources I found to help tame this beast Microsoft released.
- Customize the start menu for the default profile to remove suggested apps for all users
- Uninstall bloatware for all users
Customized Start Menu
- Log in as an admin account and customize the start menu they way you would like.
- Windows 11 stores the customized configuration under the users profile folder: c:\users\%user%\appdata\local\packages\Microsoft.Windows.StartMenuExperienceHost_%randomized%\localstate\start2.bin
- Copy this start2.bin file to somewhere on the network. Like the sysvol domain controller.
- I wrote the script below to account for the randomization as the folder path is unique per windows install, but consistent across users.
- With this in place, all NEWLY logged in users will get the customized menu, in my case I unpinned all but business only applications.
#Identify Path of the Default Profile StartMenueExperince Folder
$users = get-childitem "c:\users" | Select-Object -ExpandProperty name
foreach ($user in $users){
$path = "c:\users\" + $user + "\appdata\local\packages"
if((get-item $path -ErrorAction SilentlyContinue) -ne $null){
$startmenupath = get-childitem $path | where {$_.name -like "*StartMenuExperienceHost*"} | Select-Object -ExpandProperty name
}
}
$robopath = "c:\users\default\AppData\Local\Packages\" + $startmenupath + "\LocalState"
$robopath >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Copy Custom Start Menu to Default Profile
& robocopy "c:\windows\temp\hhcu-it\" $robopath "start2.bin"
Uninstall Bloatware
- I tried a couple of things to remove software but the following script is what ended up working for me using the remove-appxpackage -allusers command
#Remove Teams
if ((get-item "c:\windows\temp\teams.txt" -ErrorAction SilentlyContinue) -eq $null){
write-output "Uninstalled Teams" > c:\windows\temp\hhcu-it\Teams.txt
Get-AppxPackage -allusers | where {$_.name -like "*Teams*"} | Remove-AppxPackage -allusers
}else{write-output "Teams Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Xbox
if ((get-item "c:\windows\temp\xbox.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled Xbox" > c:\windows\temp\hhcu-it\xbox.txt
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.XboxGamingOverlay*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.XboxApp*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.Xbox.TCUI*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.XboxSpeechToTextOverlay*"} | Remove-AppxPackage -allusers
}else{write-output "Xbox Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Phone
if ((get-item "c:\windows\temp\yourphone.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled YourPhone" > c:\windows\temp\hhcu-it\yourphone.txt
Get-AppxPackage -allusers | where {$_.name -like "*phone*"} | Remove-AppxPackage -allusers
}else{write-output "Phone Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Clipchamp
if ((get-item "c:\windows\temp\clipchamp.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled clipchamp" > c:\windows\temp\hhcu-it\clipchamp.txt
Get-AppxPackage -allusers | where {$_.name -like "*clipchamp*"} | Remove-AppxPackage -allusers
}else{write-output "ClipChamp Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Onedrive
if ((get-item "c:\windows\temp\onedrive.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled onedrive" > c:\windows\temp\hhcu-it\onedrive.txt
Get-AppxPackage -allusers | where {$_.name -like "*Onedrive*"} | Remove-AppxPackage -allusers
}else{write-output "Onedrive Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove MSN Weather
if ((get-item "c:\windows\temp\msn.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled msn" > c:\windows\temp\hhcu-it\msn.txt
Get-AppxPackage -allusers | where {$_.name -like "*MSN*"} | Remove-AppxPackage -allusers
}else{write-output "MSN Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Feedback Hub
if ((get-item "c:\windows\temp\feedback.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled feedback" > c:\windows\temp\hhcu-it\feedback.txt
Get-AppxPackage -allusers | where {$_.name -like "*Feedback*"} | Remove-AppxPackage -allusers
}else{write-output "FeedbackHub Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Microsoft Store
if ((get-item "c:\windows\temp\Store.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled feedback" > c:\windows\temp\hhcu-it\Store.txt
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.StorePurchaseApp*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.WindowsStore*"} | Remove-AppxPackage -allusers
}else{write-output "MS Store Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
#Remove Mail and Other Apps
if ((get-item "c:\windows\temp\mail.txt" -ErrorAction SilentlyContinue) -eq $null ){
write-output "Uninstalled mail" > c:\windows\temp\hhcu-it\mail.txt
Get-AppxPackage -allusers | where {$_.name -like "*microsoft.windowscommunicationsapps*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.SkypeApp*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.GamingApp*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.MixedReality.Portal*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.BingNews*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*Microsoft.XboxIdentityProvider*"} | Remove-AppxPackage -allusers
Get-AppxPackage -allusers | where {$_.name -like "*SpotifyAB.SpotifyMusic*"} | Remove-AppxPackage -allusers
}else{write-output "Mail and other apps Already Removed"} >> c:\windows\temp\hhcu-it\Win11-Setup.log
Findings
- Removed non-business applications like XBOX...
- All users that log in after this process don't see promotional apps
- Applied a group policy to automate the script process through task scheduler
- Widgets Disabled appear to be disabled probably due to bingnews being removed
- Store is gone so users can't add things back, also disabled the store via GPO "just in case"
Shout outs
https://www.smartdeploy.com/blog/customize-default-profiles/
Comments
Post a Comment