Windows 10 Enterprise Deployment Guide

Windows 10 Enterprise Deployment Guide

For privacy conscious organizations – and removing all the bloat.


After extensive testing and iterations, it’s best to keep the Windows 10 iso/wim file exactly how it comes from Microsoft, then do everything online.
When you remove apps from the base wim, updates & the store start breaking. Causing mega headaches.
So when you need to move to a future version of Windows 10, you’ll likely need to re-run a task sequence to complete the process so remove the apps again from the new version.

Group Policy Changes

User Configuration

Policies / Administrative Templates / Start Menu and Task Bar
Remove the People Bar from the taskbar
Turn off feature advertisement balloon notifications

Preferences / Windows Settings  / Registry 
Default File Explorer to open ‘This PC’ instead of
Key: HKCU:Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Value: LaunchTo

Hide Notifications when Duplicating Screen
Key: HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings

Turn off Windows 10 Welcome Experience
Value: SubscribedContent-310093Enabled

Turn Off Windows 10 Game Bar
Key: HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR
Value: AppCaptureEnabled

Windows 10 Privacy Settings
Send Microsoft info about how ..
Key: HKCU:SOFTWARE\Microsoft\Input\TIPC
Value: Enabled

Let website provide…
HKCU: Control Panel\International\User Profile
Key: HttpAcceptLanguageOptOut

Turn Off Recently Added Apps in Windows 10 Start Menu
Key: HKCU: SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Value: Start_TrackProgs

Turn Off Start Menu App Suggestions
HKCU: SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager
Value: SystemPaneSuggestionsEnabled

Turn Off Microsoft Edge Flash Player
Key: HKCU: Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Addons
Value: FlashPlayerEnabled

Turn Off One Note Connect to Cloud Sign In
Key: HKCU: Software\Microsoft\Office\16.0\OneNote
Value: FirstBootStatus
DWORD: 01000101 (Hexadecimal)

Key: HKCU:Software\Microsoft\Office\16.0\OneNote\Options
Value: BootClippingPanelWithOneNote

Turn Off Skype Welcome Screen
Key: HKCU:Sofware\Microsoft\Office\16.0\Lync
Value: IsBasicTutorialSeenByUser

Computer Configuration

Policies / Administrative Templates

System / Internet Communication Management / Internet Communication settings
– Turn off Windows Customer Experience Improvement Program -> Enabled

System / Logon
– Do not display the Getting Started welcome screen at logon -> Enabled
– Show first sign-in animation -> Disabled
– Turn off app notifications on the lock screen -> Enabled
– Turn off picture password sign-in > Enabled
– Turn on convenience PIN sign-in -> Disabled

System / User Profiles
– Turn off the advertising ID -> Enabled

Windows Components / App Privacy
– Let Windows apps access diagnostic information about other apps -> Enabled -> Force Deny

Windows Components / Application Compatibility
– Turn off Application Telemetry -> Enabled
– Turn off Inventory Collector -> Enabled

Windows Components / Cloud Content
– Do not show Windows tips -> Enabled
– Turn off Microsoft consumer experiences -> Enabled

Windows Components / Data Collection and Preview Builds
– Allow Telemetry -> Enabled -> 0  – Security [Enterprise Only]
– Do not show feedback notifications

Windows Components / Internet Explorer
– Automatically activate newly installed add-ons

Windows Components / Internet Explorer / Security Features / Addon-on Management
– Add-on List
{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> 2
– Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects -> Enabled
Windows Components / Microsoft Account
– Block all consumer Microsoft account user authentication -> Enabled

Windows Components / Search
– Allow Cloud Search -> Disabled
– Allow Cortana above lock screen -> Disabled
– Don’t search the web or display web results in Search -> Enabled

Windows Components / Windows Defender Antivirus / MAPS
– Send file samples when further analysis is required -> Never send

Windows Components / Windows Game Recording and Broadcasting
– Enables or disables Windows Game Recording and Broadcasting -> Disabled

Windows Components / Windows Hello for Business
– Use Windows Hello for Business -> Disabled


Preferences / Windows Settings / Registry

Remove OneDrive from Explorer Folder Tree
Key: HKLM:Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}
Value: System.IsPinnedToNameSpaceTree

Disable Edge Desktop Shortcut Creation
Key: HKLM:Software\Microsoft\Windows\CurrentVersion\Explorer
Value: DisableEdgeDesktopShortcutCreation


SCCM Task Sequence Additionals

Install DotNet3.5

Import Start Menu

Example Layout:

Remove XPS Printer

Remove Windows 10 Apps

Import Default App Associations


Total Views: (490)

Leave a Reply

Your email address will not be published. Required fields are marked *

Connect with Facebook