Group Policies that remove non-required software are easy to make and improve the workstation security footprint. I like to make separate Group Policies for each app to accommodate departments using Skype etc.<\/p>\n\n\n\n
In Group Policy manager, make a new policy. I have a naming convention where Security policies start with Sec- , and Computer policies end with -C vs -U for user policies as that makes troubleshooting easier. but you do you.<\/p>\n\n\n\n
Edit your new policy and drill down to Get-AppxPackage Microsoft.Xbox* | Remove-AppxPackage<\/p>\n\n\n\n Save and Exit <\/p>\n\n\n\n Other Packages you may want to Uninstall:<\/p>\n\n\n\n Get-AppxPackage Microsoft.Skype* | Remove-AppxPackage<\/p>\n\n\n\n <\/p>\n\n\n\n Update: UGGGGHHH M$ broke this a while ago. investigating work-arounds<\/p>\n","protected":false},"excerpt":{"rendered":" Group Policies that remove non-required software are easy to make and improve the workstation security footprint. I like to make separate Group Policies for each app to accommodate departments using…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3165","post","type-post","status-publish","format-standard","hentry","category-uncategorised"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3165","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3165"}],"version-history":[{"count":3,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3165\/revisions"}],"predecessor-version":[{"id":3169,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/3165\/revisions\/3169"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3165"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3165"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3165"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
Computer
Policies
Windows Settings
Scripts
Double click Startup<\/strong>
** Click the PowerShell <\/strong>tab at top of dialog **
Click Add
Click Browse
Right Click anywhere in the blank space
New, Text Document
Make the name match your GroupPolicy name with extension .PS1 Don’t include any spaces. Agree when windows complains about changing extensions.
Right click the file and choose edit with and choose notepad. Windows will likely complain some more, just agree.
Now paste the following into notepad<\/p>\n\n\n\n
Choose Open <\/strong>to select the file we just created
Choose OK <\/strong>at the Add a Script dialog
Choose OK <\/strong>at the Startup Properties dialog
At the very top of the tree, in the left pane, right click and choose properties
Choose “Disable User Configuration settings”
we don’t have any user config in this GP, only computer config. this will make our GP execute faster.
Close the Group Policy Management Editor<\/p>\n\n\n\n