question

AndrewGuenthart-4138 avatar image
0 Votes"
AndrewGuenthart-4138 asked LuDaiMSFT-0289 commented

Unable to modify PageVisibility

Good morning,

Trying to disable settings access for a test account using configuration profile settings. The profile successfully saves with settings disabled for the test account; however, upon logging into the test account, even though other parts of the configuration profile load properly (eg, disable time zone switching), the settings does not seemed locked. The workstation is shared with an administrator employee, and I'm unsure if this is because the device enrollment occurred with an administrator login and did not change from user to user.

Basically, I'm trying to create two unique start menu experiences, one for administrators who should see control panel settings, the other for end users who don't need to see that.

mem-intune-device-configurations
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LuDaiMSFT-0289 avatar image
0 Votes"
LuDaiMSFT-0289 answered LuDaiMSFT-0289 commented

@AndrewGuenthart-4138 Thanks for posting in our Q&A. From your description, I know that you want to administrator will see control panel in start menu and others won't see. If there is anything misunderstanding, feel free to let us know.

For this issue, I have done the test in my lab. I just want pin the control panel in start menu. Here are some details in my test:
1.Start PowerShell as Administrator on the device with the customized start screen. Export the start screen using the following command:
Export-StartLayout -path C:\download\startmenu.xml
131492-image.png

When get the startmenu.xml file, please change DesktopApplicationLinkPath to DesktopApplicationID and change the content of DesktopApplicationID. To get the content of DesktopApplicationID, please run the following command:
Get-StartApps
131488-image.png

Finally, we will get the modified startmenu.xml file:

 <LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
   <LayoutOptions StartTileGroupCellWidth="6" />
   <DefaultLayoutOverride>
     <StartLayoutCollection>
       <defaultlayout:StartLayout GroupCellWidth="6">
         <start:Group Name="">
           <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationID="Microsoft.Windows.ControlPanel" />
         </start:Group>
       </defaultlayout:StartLayout>
     </StartLayoutCollection>
   </DefaultLayoutOverride>
 </LayoutModificationTemplate>

2.Create a custom profile and assign the profile to my user group.
Name: Start menu
OMA-URI: ./User/Vendor/MSFT/Policy/Config/Start/StartLayout
DataType: String (XML file)
Custom XML: Upload the modified startmenu.xml file
131445-image.png

3.Check the result, when I use the target user account to login, the control panel shows in the start menu. When I use other users(not in the user group) to login, it shows the default start menu.
Use target user:
131477-image.png

Use other user:
131478-image.png

Hope it will help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (59.8 KiB)
image.png (338.2 KiB)
image.png (120.7 KiB)
image.png (53.3 KiB)
image.png (68.8 KiB)
· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@AndrewGuenthart-4138 I am currently standing by for further update from you and would like to know how things are going. If you have any questions or concerns on the recent information I've provided you, please don't hesitate to let me know.

0 Votes 0 ·

wow thanks so much.

So the issue was I didn't have a good grip of device vs. user profiles and was trying to apply a device configuration profile (device restrictions) to "all users" in hopes pagevisibility would flip back and forth when users signed in and out. Once I realized that device configuration profiles can't flip back and forth like that (at least not quickly..), I resorted to CSP / administrative templates instead and that did the trick (did showonly:bluetooth URI CSP thing).

0 Votes 0 ·

sorry not to all users but to certain user groups. But with shared sign in the device configuration profiles would tattoo the device rather than flip back and forth. CSP/Admin templates was the solution.

0 Votes 0 ·
Show more comments