Windows 10 Intentionally breaking Windows 10 Search Bar

Why not just lock down the network settings via Group Policy?

Josephur said:

Why not just lock down the network settings via Group Policy?

Click to expand...

Network settings and the whole settings menu/control panel are already locked down. If a student were to type in 'network' into the search, most of the things they click on are blocked and the window dies before you can view it. However some aren't, particularly 'Set up a network connection', 'View network computers and devices' and 'Identify and repair network connections'. What would be ideal is if it didn't show any of these network settings at all. Disabling the search altogether would work fine too.

Network settings is purely an example, you can also just type 'C:\' into search and this will allow the user though even though the C drive has been intentionally hidden in explorer.

There's tonnes of group policy network settings, many of which seem completely unrelated. We can't find any which would stop or filter the windows search though.

I use a free program called Ashampoo AntiSpy for Windows 10 which disables information sharing, location services to Microsoft, it also has an option to disable windows search bar.




Sent from my LGMS631 using Tapatalk

Right click the taskbar and look for search and enable "hidden" to hide the search box

Sent from my GT-P5210 using Tapatalk

trstick1 said:

Right click the taskbar and look for search and enable "hidden" to hide the search box

Sent from my GT-P5210 using Tapatalk

Click to expand...

Doesn't stop students typing in the start menu. Click start and just start typing, it'll still let you search.

CosmicThing2 said:

Doesn't stop students typing in the start menu. Click start and just start typing, it'll still let you search.

Click to expand...

What about disabling search via Services?

Another option to Remove Search Icon from taskbar is to use regedit. Open the registry editior and look for the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search and in the right side pane, look for a DWORD SearchboxTaskbarMode and change its value to 0 Restart, log off or restart Explorer to take effect.

Sent from my GT-P5210 using Tapatalk

You might want to post your start button/ search bar issue on Microsoft community forum. go to Microsoft Community

Sent from my GT-P5210 using Tapatalk

Go to blogs.technet.microsoft.com/keithmayor/2012/08/03/building-public-kiosk-workstations-with-windows-7-and-windows8-itpro/ look under windows pc in a public domain

You might get some ideas from there

Sent from my GT-P5210 using Tapatalk

the way you are going about it … kids will just find a way to circumvent the hurdles … it's what kids do. and then … you won't have just the principal down your back … the kids' parents will too. and, that would be getting off lightly. why not just allow certain apps to be accessed? microsoft's "applocker" can help:

Link Removed
Link Removed

Jack has a really good idea there. I've deployed similar app disabling programs in earlier versions of Windows before and it's a better way than what you are trying to do. In XP days, the tool was called STEADY STATE, and was free up until a couple of years ago. It's a great tool to use to lock down the Windows OS, but since you mentioned you are on a Domain Network (you said your students are accessing Active Directory), this becomes much more complicated. As the Domain PDC now has ownership of the GPOs that control apps and services launching. Changing it on each additional workstation could be daunting if you were in a large school district and your deployment would be district wide. I've taught in 5 public school districts, and my last district contained 56 schools and 54,036 students. That's roughly 15,000 computers and 54,036 domain logins to manage. Our IT department was quite small, about 3-4 techs. That's several months to get around to touching all those computers and fixing restrictions on domain login accounts, even in small groups say 1 group to each school.

Given all that, this applocker looks like a long-awaited new version of the old STEADY STATE tool. And since it's been developed for a Domain environment, you can have the server (PDC) manage the security of apps and services on individual student computers through their network domain login using scripting as mentioned in Powershell. If you guys are already saving student computer images on the network, you may already have setup push restores via Roaming Profiles on all computers; this is a daunting task, but it's worked well in the corporate environment. I've seen it used with much success in multiple companies where I worked or consulted.

You didn't post anything about the size of your district, so you could be the only IT tech for a district with 1 school with 1 classroom and 10 PCs. That's going to prove to be quite challenging. If your are in a larger or much larger district as I was in all the districts I worked for (one was a Community College with 100 campus sites and 20,000 PCs), you'll need to get expert help to use the applocker tool. If this is the case, I'd strongly you contact a Microsoft Platinum Partner, one with specific experience in deployment of the Educational W10 software you've paid to license and already own. If you outsource this kind of thing, that tool will work but you need to use a reputable company. There are only a couple in the country I could recommend to assist you. One is the TSS division of IBM Global Services. They have a special Education Division that's already classified as a MS Platinum Partner, an MSDN Education Developer, and specialize in k-12 network and OS deployments. I know since I used to work there many years ago. The other company is Perot Systems; they have a similar division in their Texas or St. Louis office (used to) that worked specifically with School Districts such as yours on this type of project. There are other companies out there; but most of them do sketchy work in my opinion.

The other issue you have is that since you are an Educational entity, you'll most likely need to license the applocker for use in your school district through Microsoft. That's going to be an expensive proposition as per-seat costs could be $20 or more for the use of the app. However, since you already are paying site or enterprise licensing fees to Microsoft for use of their W10 Educational clients (and possibly Win 2xxx server too), you can get that tool licensed and added on to your annual bill your district already is paying to MS for use of their software on your computer network and classrooms. Check with your IT Director or your district's CFO.

We did a lot of this work way back in the W95/W98 days before STEADY STATE, and custom desktop shells were just starting to be used. School Districts in the Western US were very slow to adopt this technology and use it, but public libraries and college libraries were forced into setting this up once they introduced public usage of computers on their networks. If you go to either of these in the town or city where you live, you can also ask what app or company they partnered with to get their lockdown software written or installed. Most public libraries learned years ago how to deal with unruly kids as well as adults--and many of their PCs are fairly bulletproof these days. Occasionally, I'll go in their and try to poke holes in them for fun.

This could be a very small project as I mentioned if your school district is in a 1-horse town so-to-speak (less than 15 computers in the entire district) or it could be very large. Some districts have over 100,000 students in them and that's going to require a team larger than your entire IT department in order to test it and then deploy it somehow. You can let us know exactly how large, but you get the idea.

Hope that provides some further insight into the problem.
Best of luck,
<<<BIGBEARJEDI>>>