Configuring the visibility of the Settings pages

This week is not about something new, this week is about configuring the visibility of the different Settings pages. The Settings app is the Windows application that provides a unified interface to manage the different system settings. Almost everything that was configurable in the old days via Control Panel, is now configurable via the Settings app. With some exceptions of course. The main reasons to make adjustments to the visibility of the different Settings pages, are to create a more controlled and secure environment. That can be especially useful for specific types of devices, such as kiosk devices and student devices. In those cases, limiting the access to different Settings pages can help with preventing unauthorized changes and maintaining a consistent user experience. The good …

Read more

Removing preinstalled Microsoft Store apps using native functionality

This week is all about the native functionality to remove preinstalled Microsoft Store apps. Very useful. When working with Windows devices in an enterprise environment, a common request is to control the preinstalled Microsoft Store apps. These default apps, which ship as part of the Windows image, often include consumer-oriented or redundant functionality that does not align with corporate standards. Removing these apps often requires custom scripting, or other creative solutions. Starting with Windows 11 version 25H2, however, there will be native functionality available to facilitate the removal of most preinstalled Microsoft Store apps. That enables the IT administrator to easily remove those preinstalled Microsoft Store apps. Those configurations are available via Group Policy and via Configuration Service Provider (CSP), enabling basically any deployment scenario. …

Read more

Easily getting started with Intune Management Extension as managed installer

This week is all about the latest addition to the ability to easily configure the Intune Management Extension as a managed installer on Windows devices. That addition is the ability to easily configure the Intune Management Extension as a managed installer for a specific group of Windows devices. Before it was already really easy to get started with the Intune Management Extension as a managed installer, but that was a tenant-wide configuration, meaning that it was immediately applicable to all Windows devices within the environment. And that now changed. That configuration can now be assigned to specific group of Windows devices. That assignment provides a lot more flexibility with introducing and testing the Intune Management Extension as managed installer. Eventually, that will make the introduction …

Read more