Introduction
Windows Enterprise Defaults is a solution for customising a Windows PC or image to change settings from the Microsoft defaults to make them enterprise ready. Microsoft's defaults suit the lowest common denominator for home, small business and enterprises, but an enterprise-ready Windows desktop requires some adjustments to the default user environment.
Windows Enterprise Defaults simplifies making those changes to Windows, including - updating the Windows default profile, including the default Start menu and taskbar, the Windows user environment and Explorer settings, configures Windows feature states and removes in-box application packages.
Windows Enterprise Defaults supports Windows 10, Windows 11, Windows Server 2016 to Windows Server 2025, and supports both physical PCs and virtual machine images (Azure Virtual Desktop, Windows 365 etc.). Aimed at deployment provisioning physical PCs or virtual desktops gold images, the customisations will also work for Windows Server infrastructure roles.
Usage¶
The customisations are intended for operating system deployment via various methods, including:
- Imported into the Microsoft Deployment Toolkit as an application for use during Lite Touch deployments - Create a New Application in the Deployment Workbench
- Imported into Configuration Manager for use during Zero Touch deployments: - Create applications in Configuration Manager
- Packaged as a Win32 application and delivered via Microsoft Intune during Windows Autopilot - Win32 app management in Microsoft Intune
- Executed in a virtual machine image pipeline using Azure Image Builder or Packer when building a gold image
- Or even run manually on a virtual machine gold image if you're not using automation at all
Results¶
This package will configure the Windows image ready for the enterprise and the end-user. Here's the default Windows 11 desktop:
Here's a Windows 11 desktop after customisation:
Supported Platforms¶
The scripts are tested on Windows 10 (1809 and above), Windows 11, Windows Server 2016, Windows Server 2019, and Windows Server 2022. All scripts should work on any future versions of Windows; however, testing before rolling out in production is recommended.
Windows PowerShell only is supported - typically during operating system deployments, there should be no strict requirement for PowerShell 6 or above. While the scripts will likely work OK on PowerShell 6+, they are not actively tested on those versions.