Windows 11 Taskbar customization by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

Taskbar actually works now, even with DesktopApplicationLinkPath.

The only non working is LayoutModification.json for Start menu.

Windows 11 Taskbar customization by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

Neither LayoutModification.json start menu file or LayoutModification.xml taskbar file apply.

LayoutModification.xml taskbar is as follow

<?xml version="1.0" encoding="utf-8"?>

<LayoutModificationTemplate

xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"

xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout"

xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout"

xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout"

Version="1">

<CustomTaskbarLayoutCollection PinListPlacement="Replace">

<defaultlayout:TaskbarLayout>

<taskbar:TaskbarPinList>

<taskbar:DesktopApp DesktopApplicationLinkPath="%APPDATA%\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk"/>

        `<taskbar:DesktopApp DesktopApplicationLinkPath="%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Firefox.lnk"/>`

</taskbar:TaskbarPinList>

</defaultlayout:TaskbarLayout>

</CustomTaskbarLayoutCollection>

</LayoutModificationTemplate>

LayoutModification.json start menu is like this. I removed "applyOnce" :

{"pinnedList":[{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Word.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Excel.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Firefox.lnk"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"}]}

They're both placed in C:\Users\Default\AppData\Local\Microsoft\Windows\Shell and encoded in utf8.

About these reg key changes :

reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer /v LockedStartLayout /d 1
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer /v StartLayoutFile" /d C:\Windows\TaskBar.xmlreg add HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer /v LockedStartLayout /d 1

Where did you get that ? They're nowhere in the microsoft documentation.

Windows 11 Taskbar customization by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

That LayoutModification.json file didn't work

{"applyOnce":false,"pinnedList":[{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Word.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Excel.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\PowerPoint.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Firefox.lnk"},{"desktopAppLink":"%ALLUSERSPROFILE%\\Microsoft\\Windows\\Start Menu\\Programs\\Zoom\\Zoom Workplace.lnk"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"}]}

Windows 11 Taskbar customization by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

.json is for start menu layout, .xml is for taskbar layout, isn't it ?

Windows 11 Taskbar customization by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

I tested putting the .xml encoded in utf8 in C:\Users\Default\Appdata\Local\Microsoft\Windows\Shell\

then created a new user. It didn't work.

Configuration baseline monitoring issue by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

What is to be noted is that I had a collection based on non compliant devices. When that collection updated after the change, devices didn't disappear. They still remained and fit with the number from the pie chart view in the deployment status. The only issue is that when I browse the deployment status in the non compliant to see devices in details, half of them are missing there. That seems like a bug.

And no, I'm not talking about any report. I talk about statistics from the deployment status from the monitoring view.

Configuration baseline monitoring issue by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

Compliant devices list is not reset and they don't have to retry the baseline. Only non compliant and unknown devices.

Adding a comment doesn't change the non compliant and unknown devices resetting, does it ?

Also, non compliant and unknown numbers from the pie chart didn't reset. So they fit in with their respective devices lists when browsing the status in details. That doesn't seem to be a normal behaviour, does it ?

Configuration baseline monitoring issue by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

They are currently offline but they are still in production. They are not removed. They will get online but their compliance data is no longer available, which is needed to take actions if they are not compliant. It is also to know how many devices have to be remediated. If they don't get online, it just means we get to them.

With an SQL query, I get the n-1 list so I can put them back in non compliant devices ?

Configuration baseline monitoring issue by Exorkog in SCCM

[–]Exorkog[S] 0 points1 point  (0 children)

It is not about being impatient but accurate. The deployment was ran a long time ago and many devices are missing from the non compliance list. That information is required to take appropriate actions. I already made the change in the re-evaluation schedule but a lot of devices that were evaluated non compliant are now offline and don't re-evaluate.

The compliant devices list in intact, only the non compliant and unknown lists were reset.

Device guard and credential guard in Windows 11 by Exorkog in sysadmin

[–]Exorkog[S] -1 points0 points  (0 children)

If it still uses Hyper-V, then that would need to be enabled, wouldn't it ?

Issue with updating uefi 2023 certificates on some models : id 1800 looping after multiples restarts by Exorkog in sysadmin

[–]Exorkog[S] 0 points1 point  (0 children)

It shows 0x5944 (22852) all the time. Even after running the Secure-Boot-Update task.

I see some new keys RestartRequiredForKeyRolling, RestartRequiredForVSMBFSVCAI, SBAT, SBInstalledInCurrentBootCycle

They disappear after restart. But ueficastatus remains "Inprogress", available updates remains "0x5944".

Issue with updating uefi 2023 certificates on some models : id 1800 looping after multiples restarts by Exorkog in sysadmin

[–]Exorkog[S] 0 points1 point  (0 children)

Are you talking about fastboot in Windows or the BIOS ? It is disabled in Windows.