Unable to modify PageVisibility

Andrew Guenthart 21 Reputation points
2021-09-12T14:49:25.603+00:00

Good morning,

Trying to disable settings access for a test account using configuration profile settings. The profile successfully saves with settings disabled for the test account; however, upon logging into the test account, even though other parts of the configuration profile load properly (eg, disable time zone switching), the settings does not seemed locked. The workstation is shared with an administrator employee, and I'm unsure if this is because the device enrollment occurred with an administrator login and did not change from user to user.

Basically, I'm trying to create two unique start menu experiences, one for administrators who should see control panel settings, the other for end users who don't need to see that.

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,775 questions
0 comments No comments
{count} votes

Accepted answer
  1. Lu Dai-MSFT 28,366 Reputation points
    2021-09-13T06:26:37.46+00:00

    @Andrew Guenthart Thanks for posting in our Q&A. From your description, I know that you want to administrator will see control panel in start menu and others won't see. If there is anything misunderstanding, feel free to let us know.

    For this issue, I have done the test in my lab. I just want pin the control panel in start menu. Here are some details in my test:
    1.Start PowerShell as Administrator on the device with the customized start screen. Export the start screen using the following command:
    Export-StartLayout -path C:\download\startmenu.xml
    131492-image.png

    When get the startmenu.xml file, please change DesktopApplicationLinkPath to DesktopApplicationID and change the content of DesktopApplicationID. To get the content of DesktopApplicationID, please run the following command:
    Get-StartApps
    131488-image.png

    Finally, we will get the modified startmenu.xml file:

    <LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">  
      <LayoutOptions StartTileGroupCellWidth="6" />  
      <DefaultLayoutOverride>  
        <StartLayoutCollection>  
          <defaultlayout:StartLayout GroupCellWidth="6">  
            <start:Group Name="">  
              <start:DesktopApplicationTile Size="2x2" Column="0" Row="0" DesktopApplicationID="Microsoft.Windows.ControlPanel" />  
            </start:Group>  
          </defaultlayout:StartLayout>  
        </StartLayoutCollection>  
      </DefaultLayoutOverride>  
    </LayoutModificationTemplate>  
    

    2.Create a custom profile and assign the profile to my user group.
    Name: Start menu
    OMA-URI: ./User/Vendor/MSFT/Policy/Config/Start/StartLayout
    DataType: String (XML file)
    Custom XML: Upload the modified startmenu.xml file
    131445-image.png

    3.Check the result, when I use the target user account to login, the control panel shows in the start menu. When I use other users(not in the user group) to login, it shows the default start menu.
    Use target user:
    131477-image.png

    Use other user:
    131478-image.png

    Hope it will help.


    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful