Recommended guide for Windows 10 image creation (from scratch) ?
-
Not sure why, but the post removed my asterisks. There should be asterisks enclosing 3dbuilder and windowsalarms for the Get-appxpackage portions.
-
@george1421 If you use WSUS then updates will not force themselves on the machines unless you approve them. The “Windows Update for Business” stuff only applies to non-WSUS deployments where you’re controlling Windows Update only with group policy and no WSUS.
-
@adukes40 I’ll just mention that you can disable the Store and all “modern” apps with a single group policy setting. You may not need to go the drastic route of deploying LTSB if your primary concern is access to the Store & modern apps.
-
@MRCUR said in Recommended guide for Windows 10 image creation (from scratch) ?:
@george1421 If you use WSUS then updates will not force themselves on the machines unless you approve them. The “Windows Update for Business” stuff only applies to non-WSUS deployments where you’re controlling Windows Update only with group policy and no WSUS.
FWIW: There are documented “bugs” with CBB 1607 where windows updates will hang applying them. This happens with images being built in MDT as well as images already in production. The late September cume update kb3193494 as well as setting the DeliveryOptimization registry key fixed the MDT / WSUS deployment issues with image creation. I suspect that kb3193494 will also address the 1607 systems in the wild too, but we don’t have any as of now. Which will be interesting since wsus is broken so the only way to deploy that update is via some alternate methods.
-
@george1421 Interesting & good to know. We’re still actively deploying build 1511 and just starting to test 1607 so we haven’t seen any issues with WSUS patching 1511 so far.
-
@Scott-Adams My script essentially is the same as your except I have an array of applications that I look through and remove but they heart of the script does the same as your script does. The only difference is I’m not doing it in audit mode (if that matters).
-
@MRCUR What is the group policy setting? Could be extremely beneficial to us in the education sector.
-
@Scott-Adams Computer Config - Admin Templates - Windows Components - Store - “Disable all apps from Windows Store”. If you enable this, all “modern” apps plus the store will be disabled.
You must be using Enterprise or Education editions to use this (I still don’t know what the difference is between Ent & EDU, so we deploy Ent at our district).
-
@x23piracy Are you keeping all 3 of the “store” apps? “ConnectivityStore”, “StorePurchasesApp” & “WindowsStore”?
I can’t find a clear answer on what of those three (besides “WindowsStore”) is required to make the store functional if we decide to enable it in the future. I’ve also seen it noted that “DesktopAppInstaller” may be needed for some apps to be installed through the store.
-
@MRCUR said in Recommended guide for Windows 10 image creation (from scratch) ?:
@x23piracy Are you keeping all 3 of the “store” apps? “ConnectivityStore”, “StorePurchasesApp” & “WindowsStore”?
I can’t find a clear answer on what of those three (besides “WindowsStore”) is required to make the store functional if we decide to enable it in the future. I’ve also seen it noted that “DesktopAppInstaller” may be needed for some apps to be installed through the store.
Since i use WILDCARDstoreWILDCARD i think yes because all of that apps cover the word “store”
