User Profile
ahelton_kcl
Brass Contributor
Joined 4 years ago
User Widgets
Recent Discussions
Re: Why does Wipe/Fresh Start remove MS Store and other built-in UWP app distributed by Microsoft?
I believe the issue for me was a registry item being changed in my debloat script, so if you are changing any registry keys to prevent MS from auto-installing or auto-reinstalling certain UWP apps like Candy Crush and what not, one of those might actually be preventing the reinstallation of the MS Store app and other apps after a wipe/reset. I can't recall precisely which registry key it was. If I figure it out, I'll post back here and let you know.Why does Wipe/Fresh Start remove MS Store and other built-in UWP app distributed by Microsoft?
I am trying to find out if this is expected behavior. When I first onboard (join) a new device to Intune and a user logs in for the first time, MS Store and other built-in UWP apps distributed by Microsoft (i.e., Calculator, Photos) are all there. I do specify some for uninstallation via Niehaus’ branding script, and, as expected, those are removed. The problem, however, is that if I need to Wipe/Reset a device. I pretty much always use Wipe as I find it to work more reliably and much quicker than either Fresh Start of Autopilot Reset. For some reason, after performing an Intune Wipe (same thing happens after a Fresh Start) the MS Store and other built-in UWP app that I want to keep are all gone. Only the apps that I have specified for install via the Intune portal are there. I could obviously specify the missing store apps to be installed via the Intune portal, but I can't specify the MS Store for install this way (it would be nice if you could!). My question is, is this normal and expected behavior? Are Wipe and Fresh Start supposed to remove the MS Store and all UWP apps? Based on the MS Docs, I don't feel this is supposed to be happening, but maybe I'm mistaken. Any feedback will be much appreciated.Microsoft Defender SmartScreen Setup Setting Catalog vs. Endpoint Security??
Hi, I've notice that there's seems to be a couple of different places to turn on Microsoft Defender Smart Screen. In Endpoint Security -> Attach Surface Reduction -> Application Control, I find the following screen: Additionally, I can find the setting to turn on Smart Screen in Settings Catalog -> Microsoft Edge -> SmartScreen Settings as pictured here: I also find in these two locations the option to "Block users from ignoring SmartScreen warnings" (Endpoint Security) and "Prevent bypassing SmartScreen..." (Setting Catalog). Though found in different locations, are these setting essentially accomplishing the same thing or is there a difference?
