Start Menu is unresponsive on Windows 10 for Old users
I have an environment where group policy is customized to restrict user / computer access on the local computers resources e.g. C drive, Control panel, Start menu, Programs ..etc
The main issue is Start menu doesn't show at all when you click it on Windows 10, Trying to simulate and recreate the issue doesn't seem to help as the problem only occurs with old users not newly created users, Copied users.
In short, I am migrating users from Windows 8.1 to Windows 10 using SCCM Image
1- User Logs into Windows 10 first time.
2- All Policies apply and everything looks great.
3- Clicking Start seems to have no effect and Menu doesn't show up.
For newly created users, This problem doesn't occur
Here is what I have tried
1- Recreate GPO.
2- Create new OU and connect all newly created GPOs to this OU
3- Move users/computers to this OU
4- Problem didn't happen.
5- Move old users to this OU problem occurs.
6- After Start menu is being unresponsive nothing can fix it except removing all GPOs and restarting computer.
7- After the start menu starts working again the user no matter what policy gets it'll still work.
Only time it wont work again is if we use another Old user to simulate the issue.
I thought the issue might be with Groups that the users are member of so I copied all groups to another user for test but it doesn't seem to have any effect neither.
Any thoughts?
Thank you
The main issue is Start menu doesn't show at all when you click it on Windows 10, Trying to simulate and recreate the issue doesn't seem to help as the problem only occurs with old users not newly created users, Copied users.
In short, I am migrating users from Windows 8.1 to Windows 10 using SCCM Image
1- User Logs into Windows 10 first time.
2- All Policies apply and everything looks great.
3- Clicking Start seems to have no effect and Menu doesn't show up.
For newly created users, This problem doesn't occur
Here is what I have tried
1- Recreate GPO.
2- Create new OU and connect all newly created GPOs to this OU
3- Move users/computers to this OU
4- Problem didn't happen.
5- Move old users to this OU problem occurs.
6- After Start menu is being unresponsive nothing can fix it except removing all GPOs and restarting computer.
7- After the start menu starts working again the user no matter what policy gets it'll still work.
Only time it wont work again is if we use another Old user to simulate the issue.
I thought the issue might be with Groups that the users are member of so I copied all groups to another user for test but it doesn't seem to have any effect neither.
Any thoughts?
Thank you
ASKER
Hi Alex,
Customer is not using Roaming profile but they are using home folder for users to save their files there. I deleted profile where users logged in and logged back in but still the issue still exists.
Normally users are not able to access C drive ..etc and after formatting one PC with an image and tried a less privileged user the taskbar and start menu worked fine.
After signing out and trying a privileged user who can reach C drive, Run ..etc the start menu, clock, calendar all seems to be not responsive.
All those test users are in the same OU, Computer is the same computer.
Users are using mostly windows 8.1, I am doing this test on Windows 10 and on DC Windows 10 ADMT GPO template is not added yet.
Would trying ADMX 10 fix this problem you think?
Customer is not using Roaming profile but they are using home folder for users to save their files there. I deleted profile where users logged in and logged back in but still the issue still exists.
Normally users are not able to access C drive ..etc and after formatting one PC with an image and tried a less privileged user the taskbar and start menu worked fine.
After signing out and trying a privileged user who can reach C drive, Run ..etc the start menu, clock, calendar all seems to be not responsive.
All those test users are in the same OU, Computer is the same computer.
Users are using mostly windows 8.1, I am doing this test on Windows 10 and on DC Windows 10 ADMT GPO template is not added yet.
Would trying ADMX 10 fix this problem you think?
Possibly, depends on the settings you're changing.
Do you have your privileged users in the same OU as your standard users? If so, take them out of there and put them in an OU with no group policies.
It seems like a GPO configuration issue to be fair.
Run
GPresult /h c:\temp\standard.html
as a standard user and then
GPresult /h c:\temp\admin.html
as an administrative user and see what the report says.
Regards,
Alex
Do you have your privileged users in the same OU as your standard users? If so, take them out of there and put them in an OU with no group policies.
It seems like a GPO configuration issue to be fair.
Run
GPresult /h c:\temp\standard.html
as a standard user and then
GPresult /h c:\temp\admin.html
as an administrative user and see what the report says.
Regards,
Alex
ASKER
Hi Alex,
The issue is weirder than we thought, They have restricted some LAN ports so some policies are not applied and some are.
Another issue is one of the DCs have a DNS problem and DNS server is not working.
Replication also between two DCs was not working well.
We are also suspecting there's an issue with the SCCM Image, So we'll format the laptops with one USB image and try a fresh installation and join domain manually rather through the SCCM script which moves the computer object to a specific OU that has the old policy.
The GPresult doesn't show anything interesting but anyway I have added Windows 10 ADMX template anyway and applied it on a new policy under specific OU for testing purpose.
Tomorrow i'll give it a test and let you know what happens.
Thank you for your help
The issue is weirder than we thought, They have restricted some LAN ports so some policies are not applied and some are.
Another issue is one of the DCs have a DNS problem and DNS server is not working.
Replication also between two DCs was not working well.
We are also suspecting there's an issue with the SCCM Image, So we'll format the laptops with one USB image and try a fresh installation and join domain manually rather through the SCCM script which moves the computer object to a specific OU that has the old policy.
The GPresult doesn't show anything interesting but anyway I have added Windows 10 ADMX template anyway and applied it on a new policy under specific OU for testing purpose.
Tomorrow i'll give it a test and let you know what happens.
Thank you for your help
ASKER
Hi Alex,
The problem is in applocker GPO apparently, If AppLocker is not configured properly it'll block start menu.
Thank you for your help
The problem is in applocker GPO apparently, If AppLocker is not configured properly it'll block start menu.
Thank you for your help
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Applocker logs have been looked at already? They are within the eventviewer section "application and services".
ASKER
I checked applocker and its not allowing the Apps on startmenu which causes it not to work at all. After some digging I enabled any Microsoft signed package to run and that solved the problem.
Also, run GPUPDATE /force to ensure the policy is applying. I'm guessing you've made sure the users are all in the same OU right?
Thanks
Alex