Event details

Join us for a special Ask Microsoft Anything (AMA) live stream on Windows manageability! Our engineering and product teams will be answering all your questions around windows enrollment, updates, con...
Heather_Poulsen
Updated Dec 27, 2024
AMA
Steven-H's avatar
Steven-H
Brass Contributor
Apr 27, 2022
Any plans to have an app exclusions list for the Enrollment Status Page (ESP). Right now, you can block the device usage for all required apps or specified required apps but I find it's more useful to to block for all then exclude only the problematic apps.
Steven-H's avatar
Steven-H
Brass Contributor
Apr 27, 2022

Under your ESP configuration you have an option toward the bottom of the configuration called:

Block device use until these required apps are installed if they are assigned to the user/device

That option only allows you to either block ALL required apps or Specified required apps. I would find it far more useful to do ALL EXCEPT FOR and then specify the exceptions. The reason behind this is that there are certain apps that do not play nice with installation during Autopilot deployment. 

  • jdburling's avatar
    jdburling
    Copper Contributor
    Apr 27, 2022

    Agree that this would be a useful feature.


    We resorted to a custom requirement script that detects the presence of the ESP, and check the output of the script as the requirement ("ESP is not running" as the requirement). It's not 100% reliable, however.

    $ESPProcesses = Get-Process -Name 'CloudExperienceHostBroker' -ErrorAction 'SilentlyContinue'
if ($ESPProcesses.Count -eq 0) { Write-Host 'ESP is not running' }

     

    • Steven-H's avatar
      Steven-H
      Brass Contributor
      Apr 27, 2022

      I did something similar but based it off the FirstSync registry key which seems to get set after Autopilot finishes. However, I found that this key doesn't always exist under some of the device reset scenarios. It hasn't been a huge problem for me though as my policy has been to completely wipe the device before handing it off to another user.

      Get-ItemPropertyValue -Path HKLM:\SOFTWARE\Microsoft\Enrollments\*\FirstSync\ -Name IsSyncDone