Customization of Windows 10 is something that we have done since Windows 10 was released. Reason? Get rid of apps that are not enterprise ready and should not be on an Corporate device, set default apps for our preferred applications maybe apply company branding and more.
Windows 11 changes nothing of this, as many of the same apps are installed and there are still many scenarios where we want to modify the experience for the end user. What has changed is the Start Menu! The Start Menu is and will always be a big discussion point on how and what IT should control.
Lets’ have a look at the basic customizations we normally do and how they work in Windows 11.
This is how my “Windows 11 customizations” step looks like in my Task Sequence (yes, Start menu is greyed out more on why later in the post)

Branding – Works the same as in Windows 10
Remove Builtin Apps – Works the same way as in Windows 10
Importing a Default App Association – Works the same way as in Windows 10
Start Menu – Does not work the same way! It has a new format .Json, more on that later.
Windows 11 Start Menu
The Start Menu in Windows 11 is one of the biggest news and is totally different from Windows 10.

In Windows 10 we are used to use PowerShell, Intune or Group Policy to Pin apps, partially control the Start Menu and so on. We have many options that suits all the different needs out there.
In Windows 11 the Export-StartLayout command generates an .Json file instead of an .xml file as it did in Windows 10.

When writing this the Import-StartLayout command cannot import the same .json file which is generated when we export it.

The documentation for OEMs how to modify the Start Menu has been published and can be found here: https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/customize-the-windows-11-start-menu/
LayoutModification.xml is the file that was used in Windows 10 and in Windows 11 it has a new friend, LayoutModification.Json.
From Docs:

Let’s hope there will be a new option for the Import-startlayout in the future that can handle the import of the file as well.
Branding
Branding for me is something that IT should not decide, it is the business that should decide how/if it should be controlled.
Branding for me is changing the lock screen, replacing the default background and default user account picture for example. It works exactly the same way as it did in Windows 10.
End result could look like this:

The script can be found here: https://github.com/Ccmexec/MEMCM-OSD-Scripts
Default App association
Works in the same way it did in Windows 10. We make the changes we want to under settings, default apps export them and then import them during OSD.
- Log on to the computer as a user that is local administrator and open Settings and then Apps
- Under Default Apps make the changes so they are the way you want them, example could be .PDF

- Then open a Command Prompt with Run as administrator.
- In the command prompt type, the following command to export the file associations.
C:\WINDOWS\system32>Dism.exe /online /Export-DefaultAppAssociations:C:\Windows\Temp\DefaultApps.xml - Edit the DefaultApps.xml to only include the associations you want to change.
- Place it in the source folder together with script that can be downloaded below.

- Add it to your Task Sequence
Sample script can be downloaded here: https://github.com/Ccmexec/MEMCM-OSD-Scripts
Remove builtin apps and capabilities
Works the same way as in Windows 10 more information can be found here:
https://ccmexec.com/2018/04/windows-10-remove-builtin-apps-script-with-multiple-version-support/
Worth noticing is that if you do the other way around and and list what you want to keep instead of what to remove be sure to update it. There are some new interesting app names in Windows 11 that we most likely should not uninstall in there.

A version with the script and application list for Windows 11 can be found here: https://github.com/Ccmexec/MEMCM-OSD-Scripts
Summary
To sum it up, not much have changed expect for the Start Menu which is obvious as it is totally remade.
Looking forward with great interest in how IT-Pro can manage the Start Menu experience for our end users.
Any idea of setting the JSON file with a GPO will work, like the current Win10 XML setting with a GPO works?
Hi, The GPO shipped with Windows 11 pre-release is the same and can only handle .xml = Not working
Regards,
Jörgen
I have using your Script to remove default apps in OSD for Windows 11 B21H2. I downloaded B22H2 and used the same script and text file and it no longer removes apps like Solitaire OfficeHup and multiple XBox apps. Any ideas as to what has changed. I even used WimWitch to remove them before saving to a new wim file and they still appear. Thanks for making the customizations available last year as they worked well for B21H2
Hi, I have updated it on Github now! It needs a text file with the new build number for Windows 11 22H2.
Regards,
Jörgen
Do you know how one goes about removing the promotional apps that show up in your start menu on Windows 11. That is the last thing I need to update.
Hi, Are you running Enterprise edition? then check out the “Turn off Microsoft consumer experience” settings.. It will remove all that noise.
Are you able to change the wallpaper for Windows 11 ”21h2″?
After running takeown and icacls i am getting ‘access is denied’ trying to delete img0.jpg file?
Thank you
Yes, works great, the script I wrote needs to be run as System as that is the permissions vi grant.
Regards,
Jörgen
I am having some issues creating custom start menu. Exported json file and importing with the sequence. However menu does not change.
Do i need to edit json before importing?
Is there a way to test the file/process before the build?
Will i need to run the import as a system or a different user and then delete user profile or create a new one for testing?
Thank you.
I have an issue on Windows 11 23h2 wifi not connecting after upgrade from SCCM however it connect to non corporate(personal WIFI). Authentication process, the pc send request to ISE/Radius. (PEAP) the ISE responds with a negotiation request (PEAP or EAP-TLS). the PC then needs to answer with its joined domain details of the computer , which is forwarded to the AD server by the ISE/Radius to confirm the computer is domain joined to authorise it to connect to WiFi. There is something broken in this process in Windows 11 hence not connecting but Windows 10 connect